Security Operations Engineer

🕒 August 19

🌐 United States, Netherlands, +1 more countries – Remote

🇺🇸 United States – Remote 🇳🇱 Netherlands – Remote 🇬🇧 United Kingdom – Remote

🍂 Massachusetts – Remote

🍂 Massachusetts – Remote

💵 $110k - $120k / year

⏰ Full Time

🟡 Mid-level

🟠 Senior

🛡️ Security Operations

👻 Ghost score 46%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

DeepHealth

WebsiteLinkedInAll Job Openings

11 - 50 employees

🏥 Healthcare

💼 Consulting

📦 Logistics

💰 $225k Grant on 2019-08

Healthcare • Consulting • Logistics

DeepHealth is a global leader in AI-powered health informatics, providing innovative solutions designed to enhance operational efficiency and clinical confidence in radiology. As a wholly-owned subsidiary of RadNet, Inc. , DeepHealth offers a comprehensive suite of diagnostic and imaging tools, including the DeepHealth OS, a pioneering cloud-native operating system. Their AI-powered solutions support large-scale diagnostic programs and streamline workflows in areas such as breast, prostate, lung, and brain cancer detection. DeepHealth collaborates with leading healthcare institutions worldwide to transform radiology practices and improve care delivery.

📋 Description

• Build, configure, integrate, and tune the enterprise security tooling stack across cloud and corporate environments • Develop and maintain SIEM detection content, correlation rules, and SOAR response automation • Onboard log sources and telemetry feeds, validating ingestion completeness, parsing accuracy, and field normalization • Administer and tune endpoint detection and response tooling, including policy configuration, exclusion governance, and coverage validation • Integrate security tooling with adjacent platforms through APIs • Implement and maintain security configurations, guardrails, and baselines across Google Cloud Platform, Amazon Web Services, and Microsoft Azure • Build and maintain security automation and infrastructure-as-code using Terraform or an equivalent framework • Implement policy-as-code and preventive guardrails using native cloud policy engines or an equivalent open policy framework • Support cloud security posture management, including finding deduplication, theme mapping, and routing to owning teams • Harden compute, storage, database, container, and serverless cloud resources against established benchmarks • Configure and maintain Microsoft 365 and Entra ID security controls, including conditional access, identity protection, and Defender workloads • Implement least-privilege access models, roles, and policies across cloud identity systems • Implement container and Kubernetes security controls, including RBAC, workload security standards, image scanning, and runtime protection • Implement secrets management practices and eliminate hard-coded credentials • Operate vulnerability management tooling, validate scan coverage, and prioritize owner-routed findings • Provide technical remediation guidance and implement fixes for security-owned tooling and configuration • Support penetration test and vulnerability assessment remediation tracking • Support incident detection and response through log analysis, endpoint examination, identity and authentication tracing, and cloud audit log review • Support escalations from the external managed security partner • Tune alerts to reduce noise and improve detection signal • Contribute to post-incident reviews and implement control and detection improvements • Participate in tabletop exercises and resilience testing • Document engineering changes, validation criteria, and rollback plans through change management • Produce and maintain runbooks, playbooks, and technical operating procedures • Write clear, documented, reviewable code and configuration • Support audits, certifications, and customer assurance activities with technical evidence • Maintain inventory of security tooling, control coverage, licensing, and operating status • Maintain confidentiality of security testing results, control configuration details, and investigative material • Report to the Director, Security Operations, with future reporting to the Manager, Security Operations

🎯 Requirements

• 4+ years of hands-on experience in security operations, security engineering, or a comparable technical security role • Bachelor's degree in information technology, computer science, cybersecurity, or a related field, or equivalent professional experience • 2+ years of hands-on cloud security experience across at least one major cloud provider; Google Cloud Platform and Amazon Web Services preferred • 2+ years operating and tuning a SIEM platform, including detection content and log sources • 1+ year administering Microsoft 365 and Entra ID security controls in a hybrid directory environment • Working knowledge of security automation; scripting and infrastructure-as-code experience required, with Terraform preferred • Working knowledge of cloud security posture management and preventive controls • Working knowledge of container and Kubernetes security, including role-based access control and image scanning • Working knowledge of secrets management tooling and practices • Practical experience with endpoint detection and response tooling • Working knowledge of vulnerability management and the finding remediation lifecycle, including risk-based prioritization • Scripting capability in at least one of Python, PowerShell, or Bash • Familiarity with NIST Cybersecurity Framework, ISO/IEC 27001, and SOC 2 • Ability to communicate technical findings clearly in writing and verbally to technical and non-technical audiences • Ability to manage assigned work independently and escalate appropriately • Availability to support incident response outside standard business hours as required • Microsoft Office experience • Industry certification such as Security+, CompTIA CySA+, or a cloud provider security certification preferred • Experience in healthcare, medical device, or another regulated industry and familiarity with HIPAA obligations preferred • Experience working alongside or integrating with a managed security service provider preferred • Must be legally authorized to work in the United States without current or future sponsorship from DeepHealth

🏖️ Benefits

• Remote work arrangement with an option to come into the Somerville office, but not a requirement • Domestic/international travel up to 10% • Opportunity to work across a global operating footprint • Professional development through work with cloud security, automation, regulated healthcare security, and recognized security frameworks