Senior Security Engineer

🔥 3 minutes ago

🇺🇸 United States – Remote

💵 $110k - $140k / year

⏰ Full Time

🟠 Senior

👮‍♂️ Cybersecurity / Security Engineer

👻 Ghost score 0%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

HealthMark Group

WebsiteLinkedInAll Job Openings

501 - 1000 employees

🏥 Healthcare

⚕️ Healthcare Insurance

📋 Compliance

Healthcare • Healthcare Insurance • Compliance

HealthMark Group is a company that specializes in managing medical records through streamlined digital solutions. They focus on optimizing the release of information for hospitals and physician practices, ensuring efficient, compassionate, and reliable service for patients requesting their medical records. By addressing the challenges of evolving regulatory requirements and staffing shortages, HealthMark aims to improve patient satisfaction and reduce the burden of audits and chart reviews for healthcare organizations.

📋 Description

• Ensure HIPAA compliance by implementing necessary safeguards to protect Protected Health Information entrusted to the company’s clients • Design, implement, and maintain cybersecurity architecture leveraging HIPAA Security Rule, NIST Cybersecurity Framework, and NIST 800-53 • Analyze current cloud and corporate security posture and recommend improvements • Build and develop secure systems and infrastructure • Configure, troubleshoot, and maintain security infrastructure software, tooling, and services • Work with SecOps leadership, Legal, and Compliance teams to develop, review, and revise Security Policies and Procedures • Establish Identity and Access guidelines; design and manage authorization and authentication systems • Review access requests for approval and perform periodic audits of existing access • Lead security components of SOC 2 Type 2, HITrust, and PCI audits • Lead responses to client security assessments • Work with the Managed Service Provider to monitor systems for threats and triage incidents using best-practice methodology • Work with Development and CloudOps to identify, manage, and remediate vulnerabilities • Provide cybersecurity training and mentorship to staff • Develop and maintain documentation around security practices, incident response, and security protocols • Provide metrics-based reporting using cloud and third-party tools to identify and respond to security threats • Relay critical information to leadership promptly • Stay current with industry trends, attacks, and remediations • Solve intricate problems with key source systems such as Directory and Database

🎯 Requirements

• Bachelor’s degree in Computer Science, Engineering, or related field • Relevant experience at a senior engineering level for at least 5 years - may substitute for education • Experience with Cloud Service Providers such as AWS, Azure or GCP • Experience with Microsoft Entra, Active Directory, and AWS IAM administration • Experience with HIPAA, NIST, SOC2, and HITrust security controls • Current information security certification (CISSP, CSSLP, CCFP, CISM) • Experience using Agile methodologies including Scrum or Kanban • Strong knowledge of operating systems (Windows) and network protocols • Familiarity with cloud security (e.g., AWS, Azure) and DevSecOps practices • Understanding of trending attack vectors, remediations, and mitigating controls • Proficiency with scanning and vulnerability tools • Networking and Cryptography • Experience in Practice Authentication Mechanisms and controls within IAM/PAM space • Pentest / Adversarial testing of critical systems, components, or services