Raintree Systems

Security Engineer

Raintree Systems

full-time

Posted on:

Location Type: Remote

Location: Remote • Alabama, Arizona, Florida, Kansas, Massachusetts, Mississippi, Missouri, Nevada, North Carolina, Oregon, Pennsylvania, South Carolina, Tennessee, Texas • 🇺🇸 United States

Visit company website
AI Apply
Apply

Job Level

SeniorLead

Tech Stack

AWSAzureCloudCyber SecurityFirewallsITSM

About the role

  • The Security Engineer serves as a pivotal member of the IT team, offering operational guidance for the organization's Security Operations to support critical business objectives, functioning as an experienced Subject Matter Expert.
  • This role is responsible for implementing and ensuring electronic healthcare PHI-related security standards, including the NIST Cyber Security Framework, ISO 27000 series, PCI, and HIPAA controls and benchmarks.
  • The Security Engineer will collaborate with third-party security partners, manage tickets and alerts, oversee vulnerability management, and address network, cloud security, and identity & access management.
  • Continually strategize on scaling Raintree's security infrastructure with the objective of mitigating overall risk while facilitating business growth and operational efficiency.
  • Analyze and recommend security controls and procedures for information system acquisition, development, and change management, and monitoring for compliance.
  • Monitor information systems for security incidents and vulnerabilities, developing monitoring and visibility capabilities, and reporting on incidents, vulnerabilities, and trends.
  • Assist team members in developing methods and processes (runbooks & playbooks) to enhance the effectiveness, efficiency, and security of services, desktop support, and end-user support functions.
  • Actively lead Security incident response activities and implement Security incident response processes and procedures.
  • Participate in audits to ensure adherence to security protocols by staff.
  • Provide day-to-day support to foster an engaged work environment with a focus on customer service.

Requirements

  • Minimum of 8 years of professional experience in the Technology industry
  • Minimum of 6 years of technology leadership experience in high-tech companies, preferably with SaaS business models.
  • 5+ years of experience with Security Operations, such as Intrusion Detection Systems (IDS), Security Incident Event Management systems (SIEM), and anti-virus log collection systems.
  • Experience deploying and customizing security tools for threat detection and risk reduction, including vulnerability scanners, static analyzers, web application firewalls, and endpoint security monitoring.
  • Hands-on day-to-day operational experience with industry-standard tools such as Slack, Zoom, IT Service Management (e.g., Freshservice), Azure Active Directory, and Single Sign-On (e.g., Okta).
  • Demonstrated hands-on experience implementing a Tiered approach to Helpdesk, including automation of onboarding & offboarding in conjunction with HRS.
  • Proficiency in Cloud platforms: AWS & Azure.
  • Knowledge of SOC 2, CIS, and NIST Security Governance & Compliance.
  • Broad knowledge of scripting and/or development ability to customize existing security tools.
  • Knowledge of physical and logical secure network design, UDP/TCP protocols, and cloud topologies.
  • Knowledge of Microsoft and Google product suites.
Benefits
  • Remote Work/Work From Home
  • Paid Time Off/11 Paid Holidays/Year-End Holiday Break
  • Health, Dental, Vision, HSA/FSA
  • 401K with Company Match
  • Disability & Life Insurance
  • Employee Assistance Program
  • Paid Parental Leave

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard skills
Security OperationsIntrusion Detection SystemsSecurity Incident Event Managementvulnerability managementthreat detectionrisk reductionscriptingcloud securityidentity & access managementnetwork security
Soft skills
leadershipoperational guidancecollaborationcustomer servicestrategic planningincident responseteam supportengagementcommunicationproblem-solving