Security Operations Engineer

Job not on LinkedIn

🔥 0 minutes ago

🌐 United States, Netherlands, +1 more countries – Remote

🇺🇸 United States – Remote 🇳🇱 Netherlands – Remote 🇬🇧 United Kingdom – Remote

🍂 Massachusetts – Remote

🍂 Massachusetts – Remote

💵 $110 - $120 / year

⏰ Full Time

🟡 Mid-level

🟠 Senior

🛡️ Security Operations

👻 Ghost score 20%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

DeepHealth

WebsiteLinkedInAll Job Openings

11 - 50 employees

🏥 Healthcare

💼 Consulting

📦 Logistics

💰 $225k Grant on 2019-08

Healthcare • Consulting • Logistics

DeepHealth is a global leader in AI-powered health informatics, providing innovative solutions designed to enhance operational efficiency and clinical confidence in radiology. As a wholly-owned subsidiary of RadNet, Inc. , DeepHealth offers a comprehensive suite of diagnostic and imaging tools, including the DeepHealth OS, a pioneering cloud-native operating system. Their AI-powered solutions support large-scale diagnostic programs and streamline workflows in areas such as breast, prostate, lung, and brain cancer detection. DeepHealth collaborates with leading healthcare institutions worldwide to transform radiology practices and improve care delivery.

📋 Description

• Build, configure, integrate, and tune the enterprise security tooling stack across cloud and corporate environments • Develop and maintain SIEM detection content, correlation rules, and SOAR response automation • Onboard log sources and telemetry feeds while validating ingestion, parsing, and field normalization • Administer and tune endpoint detection and response tooling, including policy configuration, exclusion governance, and coverage validation • Integrate security tooling with adjacent platforms through APIs • Implement security configurations, guardrails, and baselines across Google Cloud Platform, Amazon Web Services, and Microsoft Azure • Build and maintain security automation and infrastructure-as-code using Terraform or an equivalent framework • Implement policy-as-code and preventive guardrails • Support cloud security posture management, including finding deduplication, theme mapping, and routing to owning teams • Harden compute, storage, database, container, and serverless cloud resources against established benchmarks • Configure and maintain Microsoft 365 and Entra ID security controls, including conditional access, identity protection, and Defender workloads • Implement least-privilege access models, roles, and policies across cloud identity systems • Implement container and Kubernetes security controls, including RBAC, workload security standards, image scanning, and runtime protection • Maintain secrets management practices and eliminate hard-coded credentials • Operate vulnerability management tooling and translate scanner output into prioritized, owner-routed findings • Provide remediation guidance and implement fixes for security-owned tooling and configurations • Support penetration test and vulnerability assessment remediation tracking • Support incident detection and response through log analysis, endpoint examination, identity and authentication tracing, and cloud audit log review • Support escalations from the external managed security partner • Tune alerts and contribute to post-incident reviews, tabletop exercises, and resilience testing • Document security control changes, validation criteria, and rollback plans • Produce runbooks, playbooks, technical procedures, code, and configuration • Support audits, certifications, and customer assurance activities with technical evidence • Maintain inventory of security tooling, control coverage, licensing position, and operating status • Maintain confidentiality of security testing results, control configurations, and investigative material • Report to the Director, Security Operations, with future reporting to the Manager, Security Operations

🎯 Requirements

• 4+ years of hands-on experience in security operations, security engineering, or a comparable technical security role • Bachelor's degree in information technology, computer science, cybersecurity, or a related field, or equivalent professional experience • 2+ years of hands-on cloud security experience across at least one major cloud provider; Google Cloud Platform and Amazon Web Services preferred • 2+ years operating and tuning a SIEM platform, including detection content and log sources • 1+ year administering Microsoft 365 and Entra ID security controls in a hybrid directory environment • Working knowledge of security automation; scripting and infrastructure-as-code experience required • Working knowledge of cloud security posture management and preventive controls • Working knowledge of container and Kubernetes security, including role-based access control and image scanning • Working knowledge of secrets management tooling and practices • Practical experience with endpoint detection and response tooling • Working knowledge of vulnerability management and risk-based finding prioritization • Scripting capability in Python, PowerShell, or Bash • Familiarity with NIST Cybersecurity Framework, ISO/IEC 27001, and SOC 2 • Ability to communicate technical findings clearly to technical and non-technical audiences • Ability to manage assigned work independently and escalate appropriately • Availability to support incident response outside standard business hours as required • Microsoft Office experience • Must be legally authorized to work in the United States without current or future sponsorship from DeepHealth • Industry certification such as Security+, CompTIA CySA+, or a cloud provider security certification (Preferred) • Experience in healthcare, medical device, or another regulated industry and familiarity with HIPAA obligations (Preferred) • Experience working alongside or integrating with a managed security service provider (Preferred)

🏖️ Benefits

• Remote work arrangement • Option to come into the Somerville office, but not required • Up to 10% domestic/international travel • Opportunity to work with global operating teams and security environments • Professional development through hands-on work with cloud security, automation, compliance, and regulated healthcare environments