Staff Engineer, Security
Employment Information
Report this job
Job expired or something wrong with this job?
Job Description
Staff Security Engineer strengthening NextGen Healthcare’s cloud security posture. Automating threat detection, vulnerability mitigation, and AI-enabled security operations across cloud systems.
Responsibilities:
- Develop and maintain security tooling, guidelines, and standards
- Author cloud-native security policies with DevSecOps teams using Terraform
- Perform infrastructure-as-code scanning for IaaS deployments
- Participate in threat intelligence and forensic analysis exercises
- Automate vulnerability mitigation across cloud-hosted systems
- Create and maintain SOC runbooks and incident response documentation
- Create and monitor correlated SIEM event dashboards and develop alert thresholds
- Use AI-enabled IDEs for security reviews of IaC, pull requests, and architecture designs
- Validate AI-generated security findings and recommendations
- Use CNAPP to identify and prioritize cloud, container, and pipeline risks and integrate findings with SIEM
- Research AI-driven threats and translate them into detections, controls, and engineering guidance
- Securely connect AI tools to CNAPP, SIEM, and other security data sources using MCP
- Assess MCP server, tool-permission, and data-access security risks
- Correlate CNAPP and SIEM data using AI and provide prioritized risk reporting
- Research, implement, and configure protections for email, hosts, and identities
- Write scripts to automate manual tasks
Requirements:
- Bachelor's Degree in Computer Science or related discipline, or any combination of education and experience providing the required qualifications
- 6+ years of experience in systems engineering, software engineering, security, or related experience
- Experience with Git, Jira, and Confluence
- Certifications in AWS, GCP, OCSP, CEH, or similar
- Knowledge of Windows or Linux shell scripting and Python or similar coding language
- Knowledge of infrastructure-as-code tooling such as CloudFormation and Terraform
- Experience deploying and managing enterprise-scale applications in AWS or similar cloud services
- Knowledge of Linux operating system
- Knowledge of Ansible, Puppet, Chef, and containerization technologies
- Knowledge of Jenkins or similar continuous integration systems
- Knowledge of relational and/or NoSQL databases, including Microsoft SQL Server, PostgreSQL, and MongoDB
- Knowledge of Microsoft Office Suite
- Knowledge of AI-assisted development and security tools such as Claude Code
- Knowledge of the Model Context Protocol (MCP), including its security implications
- Knowledge of CNAPP platforms, SIEM platforms, log correlation, and emerging AI-driven threats and defenses
- Ability to work as a team member and communicate effectively
- Ability to establish and maintain effective working relationships
- Ability to determine system behavior and assess effects of changing conditions, operations, and environments
- Ability to work in a fast-paced environment, stay organized, prioritize workload, multitask, and meet deadlines
Benefits:
- Equal opportunity employer committed to diversity and an inclusive environment
Similar Jobs
Security Architect – Zero Trust, Application Access
Security Architect designing Zscaler Zero Trust access for internal business applications. Assessing application exposure, establishing security standards, and guiding cross-functional implementation.
Security Engineer
Security Engineer protecting Allium’s canonical onchain finance data infrastructure, cloud systems, and AI agents. Building detection, response, access, and compliance controls.
Manager, Cloud Security Engineering
Cloud security engineering manager leading AWS, Azure, and GCP security teams for Workstreet’s compliance-focused client engagements. Building hardened infrastructure, automation, and audit-ready controls.
Security Engineer
Security Engineer owning vulnerability management, SIEM, and incident investigations. Securing cloud-native AWS environments for Arionkoder’s AI consulting clients.
IT Systems and Security Specialist I
IT systems and security specialist supporting Aspire Living & Learning’s service operations remotely. Maintaining IT systems and security while traveling periodically across the service area.
Associate, Cybersecurity – Data Privacy Incident Response
Associate attorney advising clients through cybersecurity incidents, data breaches, and breach notification requirements. Supporting Constangy's national Cybersecurity & Data Privacy practice.
Associate, Cybersecurity – Data Privacy Litigation
Associate attorney defending privacy, cybersecurity, and complex commercial litigation for Constangy, Brooks, Smith & Prophete, LLP. Conducting research, drafting litigation documents, and supporting cases through trial preparation.
Associate Security Researcher
Associate Security Researcher supporting Cobalt’s penetration-testing research through systems administration, threat simulation, vulnerability triage, and technical report quality control.
Cyber Security Engineer
Cyber Security Engineer leading incident response, threat hunting, and forensics for NVIDIA’s corporate, cloud, and product environments. Building automated defenses against advanced threats.
Senior Security Research Architect, Confidential Computing
Senior Security Research Architect designing Trusted Execution Environment architectures for NVIDIA NICs and DPUs. Driving confidential-computing security across hardware, software, research, and product teams.
IT and Security Manager
IT and Security Manager securing Microsoft 365, Azure, vendors, and cybersecurity operations for Furnished Quarters’ furnished apartment business. Managing infrastructure, incident response, access, compliance, and technology partnerships.
Senior Security Engineer
Senior Security Engineer protecting Cisco’s network-device portfolio through threat modeling, code review, and reproducible security testing. Improving embedded and IoT security across hardware, firmware, and device lifecycles.
Regional Sales Manager – Security
Regional Sales Manager growing security-channel sales for Nice North America, a smart home and building automation company. Managing customers, training partners, exceeding quotas, and providing competitive intelligence across the assigned territory.
Senior Director, Product Security and Privacy Counsel
Product counsel guiding security, privacy, open-source licensing, and regulatory risk for Neo4j’s graph intelligence platform. Partnering with product, engineering, security, and go-to-market teams.
Senior Security Engineer, Product
Senior Security Engineer owning product and protocol security for Jito’s Solana market infrastructure. Building security tooling, monitoring, audits, and protections for crypto products.
Principal Security Engineer
Principal Security Engineer assessing CSP architectures and authorization packages for FedRAMP compliance. Supporting Valiant Solutions’ federal cybersecurity and IT services for government customers.
Cybersecurity Engineer, Clearance Required
Cybersecurity Engineer securing Army cloud infrastructure and maintaining RMF authorization artifacts for LMI, a federal digital solutions provider. Integrating DoD controls, vulnerability management, and DevSecOps workflows.
Técnico Seguridad Perimetral
Administrador Oracle gestionando bases de datos corporativas para Logicalis Spain, empresa de centros de datos y soluciones tecnológicas. Instalación, migración, mantenimiento y soporte de entornos Oracle empresariales.
Técnico/a de Comunicaciones – Redes, Seguridad Perimetral, SD-WAN
Técnico de comunicaciones gestionando redes corporativas, seguridad perimetral y SD-WAN para The Whiteam Consulting. Integrando infraestructuras on-premise y cloud en proyectos tecnológicos.
Security Engineer II
Security Engineer securing information systems, data, and networks for a global organization. Conducting risk assessments, audits, incident investigations, and cybersecurity tool administration.