Security Engineer

🔥 3 minutes ago

🇺🇸 United States – Remote

💵 $90k - $135k / year

⏰ Full Time

🟢 Junior

🟡 Mid-level

👮‍♂️ Cybersecurity / Security Engineer

🚫👨‍🎓 No degree required

👻 Ghost score 0%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

HFD

WebsiteLinkedInAll Job Openings

51 - 200 employees

🏥 Healthcare

💼 Consulting

🛡️ Insurance

Healthcare • Consulting • Insurance

HFD is a company that offers affordable financing options for patients seeking healthcare services in various specialties, including dental, orthodontics, veterinary, audiology, vision, and cosmetics. The company is committed to providing pay-over-time solutions that are accessible to nearly every patient, regardless of their credit score, addressing a significant challenge faced by traditional lenders. HFD's platform aims to improve patient approval rates, reduce financial barriers to treatment, and support healthcare providers by minimizing the discomfort of financial discussions with patients. HFD partners with healthcare providers to onboard them onto their platform, facilitating seamless patient financing experiences.

📋 Description

• Apply risk management principles to identify, assess, and reduce security risks across cloud, endpoint, identity, network, and application environments • Maintain working knowledge of approved cybersecurity standards, frameworks, policies, procedures, and industry best practices • Perform security control reviews, gap assessments, and remediation planning • Support vulnerability management, including vulnerability analysis, risk prioritization, remediation tracking, and validation of fixes • Monitor alerts, logs, and threat indicators from SIEM, EDR, cloud, identity, and other security platforms • Triage and investigate security events, support containment actions, document findings, and assist with incident response • Review system, application, cloud, and identity configurations for security risks, misconfigurations, and hardening opportunities • Assist with compliance and audit readiness, including evidence collection, control validation, and documentation • Support access reviews and identity security efforts, including privileged access validation, account hygiene, and high-risk permission reviews • Define and document security requirements for systems, integrations, applications, and business processes • Maintain and improve security policies, procedures, runbooks, and post-incident documentation • Contribute to detection engineering by refining alerts, reducing false positives, and improving security-platform visibility • Improve automation, monitoring, response workflows, and security operations maturity • Collaborate with IT, engineering, and business teams to communicate risks, recommend improvements, and support remediation • Participate in lessons learned, incident reviews, and continuous improvement activities • Conduct proactive threat hunting across multiple landscapes

🎯 Requirements

• 2–5 years of hands-on experience in an IT security, cloud security, or security operations role • Practical experience with Microsoft Azure security services (Defender, Entra ID, Secure Score, Sentinel, or equivalent) • Foundational knowledge of PCI DSS or similar compliance frameworks (HIPAA, SOC 2, NIST) • Strong written communication skills for writing runbooks, RCAs, and compliance documentation • Ability to work independently and manage own workload with minimal oversight • Robust conceptual and practical understanding of IT infrastructure designs, technologies, products, and services • Experience formulating and/or interpreting cyber threat analysis of adversary techniques, tactics, and procedures used to disrupt computer networks • Ability to pay close attention to detail and be self-motivated • Ability to multitask and excel in a fast-paced environment • Beginner / Intermediate proficiency in Microsoft Excel • Security certification such as CompTIA Security+, AZ-500, SC-200, PJPT, PNPT, or CISSP Associate (preferred) • Experience in healthcare, fintech, or financial services environment (preferred) • Familiarity with MITRE ATT&CK framework and threat modeling (preferred) • Scripting or automation skills (PowerShell, Python, KQL/Kusto for Azure) (preferred) • Exposure to DevSecOps practices or pipeline security tooling (preferred) • Excellent written and verbal communication skills, analytical ability, judgment, and ability to work effectively with the DevOps and Engineering Support Team (preferred)

🏖️ Benefits

• Medical, Dental, Vision Insurance • 401k with 4% company match • Unlimited PTO • 6 days of paid sick time • 6 paid holidays • 1 floating holiday from the HFD approved list • EPIC company culture