FREE ACCESS
5,000–10,000 jobs/day
See all jobs on JobTailor
Search thousands of fresh jobs every day.
Discover
- Fresh listings
- Fast filters
- No subscription required
Create a free account and start exploring right away.
Security Operations Engineer
Employer Direct HealthcareSecurity Operations Engineer at Lantern focusing on securing healthcare platforms and responding to threats in cloud and AI environments. Collaborate with security team members on incident response and automation.
Tech Stack
Tools & technologiesAWSAzureCloudFirewallsPythonSplunk
About the role
Key responsibilities & impact- Monitor, triage, and investigate alerts across SIEM, EDR, NDR, and DLP platforms
- Lead or support incident response activities including scoping, containment, eradication, and post-incident review in alignment with NIST SP 800-61r2
- Develop, tune, and maintain detection rules, correlation queries, and behavioral models across the security stack
- Conduct threat hunting exercises using structured methodologies (MITRE ATT&CK, hypothesis-driven)
- Build and maintain security automation workflows to reduce manual triage and accelerate response (Python, PowerShell, GitHub Actions, REST APIs)
- Integrate security tooling with ticketing and workflow platforms (Jira) for consistent case management and SLA tracking
- Contribute to SOAR playbook development and refinement
- Support vulnerability management operations including Tenable scan management, findings triage, and Jira-based remediation tracking
- Maintain and optimize SIEM content, log pipelines, and data sources; ensure complete and accurate log ingestion from cloud, endpoint, network, and identity layers
- Manage and tune EDR policies, exclusions, and response actions within CrowdStrike Falcon
- Support DLP policy operations, including investigation support for policy violations
- Maintain firewall log visibility and coordinate with network/infrastructure teams on Fortinet policy enforcement
- Support evidence collection and control testing for HITRUST CSF v11 and SOC 2 Type II assessments
- Contribute to security documentation including runbooks, playbooks, and operational procedures
- Participate in tabletop exercises and contribute to lessons-learned outcomes
- Support identity and access-related security reviews in collaboration with the IAM/infrastructure team
- Monitor and investigate anomalous activity associated with AI agent infrastructure, API integrations, and LLM-based services
- Contribute to security controls and detection coverage for AI workloads under the organization’s AI governance framework
- Help develop behavioral baselines and detection logic specific to AI/agentic traffic patterns
Requirements
What you’ll need- A minimum of 4+ years of experience in a Security Operations Center (SOC), IT security, or related security operations role
- Hands-on experience with a SIEM platform (Sumo Logic, Splunk, Microsoft Sentinel, or equivalent); ability to write and tune detection queries
- Proficiency with EDR platforms (CrowdStrike Falcon strongly preferred)
- Working knowledge of network security fundamentals including firewalls, IDS/IPS, and network traffic analysis
- Scripting proficiency in Python and/or PowerShell for automation and tool integration
- Familiarity with cloud security concepts (Azure or AWS); experience investigating cloud-native log sources (Entra ID, Azure AD Sign-in Logs, CloudTrail, etc.)
- Understanding of compliance-driven security operations in regulated environments (HIPAA, SOC 2, or HITRUST preferred)
- Strong written communication skills for documentation, escalation, and stakeholder reporting
- Exceptional interpersonal, organizational, and communication skills and ability to internalize and exemplify Lantern’s LIGHT Values.
Benefits
Comp & perks- Medical Insurance
- Dental Insurance
- Vision Insurance
- Short & Long Term Disability
- Life Insurance
- 401k with company match
- Flexible Time Off
- Paid Parental Leave
ATS Keywords
✓ Tailor your resumeApplicant Tracking System Keywords
Tip: use these terms in your resume and cover letter to boost ATS matches.
Hard Skills & Tools
SIEMEDRNDRDLPPythonPowerShellGitHub ActionsREST APIsTenableCrowdStrike Falcon
Soft Skills
written communicationinterpersonal skillsorganizational skillscommunication skills
Certifications
SOC 2 Type IIHITRUST