Security Engineer

🕒 July 1

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

HealthMark Group

WebsiteLinkedInAll Job Openings

501 - 1000 employees

🏥 Healthcare

⚕️ Healthcare Insurance

📋 Compliance

Healthcare • Healthcare Insurance • Compliance

HealthMark Group is a company that specializes in managing medical records through streamlined digital solutions. They focus on optimizing the release of information for hospitals and physician practices, ensuring efficient, compassionate, and reliable service for patients requesting their medical records. By addressing the challenges of evolving regulatory requirements and staffing shortages, HealthMark aims to improve patient satisfaction and reduce the burden of audits and chart reviews for healthcare organizations.

📋 Description

• Ensure HIPAA compliance by implementing safeguards protecting Protected Health Information • Implement and maintain cybersecurity architecture using HIPAA Security Rule, NIST Cybersecurity Framework, and HITRUST • Analyze cloud and corporate security posture, recommend improvements, and build secure systems and infrastructure • Configure, troubleshoot, and maintain security infrastructure software, tooling, and services • Develop, review, and revise Security Policies and Procedures with SecOps leadership, Legal, and Compliance • Establish Identity and Access guidelines and manage authorization and authentication systems • Review access requests and perform periodic access audits • Support security components of SOC 2 Type 2, HITRUST, and PCI audits • Respond to client security assessments • Collaborate with the Managed Service Provider to monitor systems for threats and triage incidents • Identify, manage, and remediate vulnerabilities with Development and CloudOps • Provide cybersecurity training and mentorship to staff • Develop and maintain documentation for security practices, incident response, and security protocols • Provide metrics-based reporting using cloud and third-party tools to identify and respond to security threats • Relay critical information to leadership promptly • Stay current with industry trends, attacks, and remediations • Solve intricate problems involving key source systems such as directories and databases

🎯 Requirements

• Bachelor’s degree in Computer Science, Engineering, or related field • At least 3 years of relevant experience; may substitute for education • Experience with cloud service providers such as AWS, Azure, or GCP • Experience administering Microsoft Entra, Active Directory, and AWS IAM • Experience with HIPAA, NIST, SOC 2, and HITRUST security controls • Current information security certification: CISSP, CSSLP, CCFP, or CISM • Experience using Agile methodologies, including Scrum or Kanban • Strong knowledge of Windows operating systems and network protocols • Familiarity with cloud security and DevSecOps practices • Understanding of attack vectors, remediations, and mitigating controls • Proficiency with scanning and vulnerability tools • Knowledge of networking and cryptography • Experience with authentication mechanisms and controls in IAM/PAM • Pentesting or adversarial testing experience with critical systems, components, or services • Related-field or tooling certification is a plus