Senior IT Security Engineer

Job not on LinkedIn

🔥 16 minutes ago

🇺🇸 United States – Remote

💵 $150k - $215k / year

⏰ Full Time

🟠 Senior

👮‍♂️ Cybersecurity / Security Engineer

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

👻 Ghost score 0%

What it means: the chance that no one is really hiring for this job.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Komodo Health

WebsiteLinkedInAll Job Openings

501 - 1000 employees

Founded 2014

🏥 Healthcare

💼 Consulting

📦 Logistics

💰 $220M Series E on 2021-03

Healthcare • Consulting • Logistics

Komodo Health is a data-driven healthcare technology company that leverages comprehensive patient-encounter data, innovative algorithms, and clinical expertise to transform healthcare challenges into meaningful insights. With their Healthcare Map, Komodo Health provides a precise view of the U. S. healthcare system, offering software applications such as MapExplorer™, MapAI™, Komodo Drug Projections, and more to improve clinical, commercial, and patient engagement outcomes. Their solutions help quantify scientific engagement, mine insights from patient journeys, and enhance the precision of healthcare strategies, ultimately reducing the burden of disease and advancing technology use in healthcare.

📋 Description

• Engineer and run Corporate IT Security across identity, devices, endpoints, internal networks, workforce SaaS and AI tools • Protect the employee environment and support security for sensitive healthcare data • Lead corporate-environment incidents as Incident Commander under the company incident response program • Partner with Legal, Compliance and business leaders on security matters • Perform hands-on configuration, scripting, investigation and remediation, comprising at least 70% of the role • Assess corporate identity, devices and SaaS and create a sequenced remediation backlog • Implement phishing-resistant MFA, SSO enforcement, session and sign-on policies, least-privilege admin roles and service-account governance • Implement device trust and conditional access across macOS and Windows using MDM and EDR • Ensure application provisioning and deprovisioning through the identity provider and maintain access-review evidence • Govern SaaS data export, API access, sessions, OAuth apps, connected applications and audit logs • Define identity, endpoint and SaaS-abuse detection use cases with Security • Coordinate IT, Legal, Compliance and Communications during incidents; drive investigation and remediation • Run blameless post-incident reviews and track follow-ups to completion • Establish workforce AI guardrails covering approved tools, SSO, RBAC, retention, logging, access reviews and integrations • Run tabletop exercises and establish governance for shadow IT, risky OAuth grants and workforce AI adoption

🎯 Requirements

• 6–8+ years in corporate security, IT security, security engineering or security operations • 4+ years of hands-on engineering of corporate controls at a cloud-native or SaaS company • Deep hands-on experience with enterprise identity providers and SAML, OIDC, OAuth 2.0 and SCIM • Experience with sign-on and session policies, device assurance or conditional access, and lifecycle automation • Hands-on experience with device trust, MDM and EDR across macOS and Windows • Experience hardening productivity suites and major SaaS platforms, including admin roles, export and API permissions, OAuth app governance and audit logging • Experience defining detection use cases and writing or tuning detection rules with a security operations team • Experience serving as incident commander or lead responder on real security incidents • Production-quality scripting in Python or similar and experience integrating security tools through APIs • Experience producing control evidence for SOC 2 and other audits • Clear writing and executive communication; ability to translate technical risk into business impact and decisions • Ability to work through influence across IT, Engineering, Security, Legal, People and Procurement • Experience partnering with Legal and Compliance on investigations, audits or regulatory reviews • Required use of AI for triage, investigation, documentation and automation with human accountability • Experience in healthcare, life sciences or regulated-data environments is prioritized • Certifications such as GCIH or CISSP are nice to have

🏖️ Benefits

• Performance-based bonuses may be available • Equity awards may be available • Comprehensive health insurance • Dental insurance • Vision insurance • Flexible time off and holidays • 401(k) with company match • Disability insurance • Life insurance • Leaves of absence in accordance with applicable laws and company policy • Hybrid work model / flexibility

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume