Security Operations Engineer

🕒 August 19

🌐 United States, Netherlands, +1 more countries – Remote

🇺🇸 United States – Remote 🇳🇱 Netherlands – Remote 🇬🇧 United Kingdom – Remote

🍂 Massachusetts – Remote

🍂 Massachusetts – Remote

💵 $110k - $120k / year

⏰ Full Time

🟡 Mid-level

🟠 Senior

🛡️ Security Operations

👻 Ghost score 46%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

DeepHealth

WebsiteLinkedInAll Job Openings

11 - 50 employees

🏥 Healthcare

💼 Consulting

📦 Logistics

💰 $225k Grant on 2019-08

Healthcare • Consulting • Logistics

DeepHealth is a global leader in AI-powered health informatics, providing innovative solutions designed to enhance operational efficiency and clinical confidence in radiology. As a wholly-owned subsidiary of RadNet, Inc. , DeepHealth offers a comprehensive suite of diagnostic and imaging tools, including the DeepHealth OS, a pioneering cloud-native operating system. Their AI-powered solutions support large-scale diagnostic programs and streamline workflows in areas such as breast, prostate, lung, and brain cancer detection. DeepHealth collaborates with leading healthcare institutions worldwide to transform radiology practices and improve care delivery.

📋 Description

• Build, configure, integrate, and tune the enterprise security tooling stack across cloud and corporate environments • Develop and maintain SIEM detection content, correlation rules, and SOAR response automation • Onboard log sources and telemetry feeds, validating ingestion, parsing, and field normalization • Administer and tune endpoint detection and response tooling • Integrate security tooling through APIs • Implement security configurations, guardrails, and baselines across GCP, AWS, and Azure • Build security automation and infrastructure-as-code using Terraform or an equivalent framework • Implement policy-as-code and preventive cloud guardrails • Support cloud security posture management and route prioritized findings to owning teams • Harden compute, storage, database, container, and serverless resources against established benchmarks • Configure Microsoft 365 and Entra ID security controls, including conditional access, identity protection, and Defender workloads • Implement least-privilege access models across cloud identity systems • Implement container and Kubernetes security controls • Maintain secrets management practices and eliminate hard-coded credentials • Operate vulnerability management tooling and translate scanner output into prioritized findings • Provide technical remediation guidance and implement fixes for security-owned tooling and configuration • Support penetration test and vulnerability assessment remediation tracking • Support incident detection and response through log, endpoint, identity, authentication, and cloud audit log investigations • Analyze escalations from the external managed security partner • Tune alerts and improve detection quality • Contribute to post-incident reviews and implement control and detection improvements • Participate in tabletop exercises and resilience testing • Document security-control changes, validation criteria, and rollback plans • Produce runbooks, playbooks, and technical operating procedures • Write documented, reviewable code and configuration • Support audits, certifications, and customer assurance activities with technical evidence • Maintain inventories of security tooling, coverage, licensing, and operating status • Maintain confidentiality of security testing and investigative material • Report to the Director, Security Operations

🎯 Requirements

• 4+ years of hands-on experience in security operations, security engineering, or a comparable technical security role • Bachelor's degree in information technology, computer science, cybersecurity, or a related field, or equivalent professional experience • 2+ years of hands-on cloud security experience across at least one major cloud provider • 2+ years operating and tuning a SIEM platform, including detection content and log sources • 1+ year administering Microsoft 365 and Entra ID security controls in a hybrid directory environment • Working knowledge of security automation; scripting and infrastructure-as-code experience required • Working knowledge of cloud security posture management and preventive controls • Working knowledge of container and Kubernetes security, including RBAC and image scanning • Working knowledge of secrets management tooling and practices • Practical experience with endpoint detection and response tooling • Working knowledge of vulnerability management and risk-based finding prioritization • Scripting capability in Python, PowerShell, or Bash • Familiarity with NIST Cybersecurity Framework, ISO/IEC 27001, and SOC 2 • Ability to communicate technical findings to technical and non-technical audiences • Ability to manage work independently and escalate appropriately • Availability to support incident response outside standard business hours • Microsoft Office experience • Industry certification such as Security+, CompTIA CySA+, or cloud provider security certification preferred • Experience in healthcare, medical device, or another regulated industry and familiarity with HIPAA preferred • Experience integrating with a managed security service provider preferred • Must be legally authorized to work in the United States without current or future sponsorship

🏖️ Benefits

• Remote work option • Option to come into the Somerville office, but not required • Domestic/international travel up to 10% • Opportunity to work with global security operations across cloud and corporate environments