Remote Staff Information Security Engineer

Description:

• N-Power Medicine is hiring a Staff Information Security Engineer who will report to the Senior Manager, Security & Privacy.
• This position is responsible for designing, implementing, and optimizing security solutions to protect critical systems and sensitive patient data.
• The role ensures compliance with industry regulations and mitigates cybersecurity risks.
• The ideal candidate should have deep expertise in cloud security, security architecture, risk management, and hands-on experience implementing security technologies within a healthcare environment.
• This position is remote within the United States.
• Responsibilities include designing and managing security controls in accordance with HIPAA, HITRUST, ISO 27001, NIST, and other industry-standard security frameworks.
• The engineer will conduct periodic threat modeling and security risk assessments, perform vulnerability scans, and coordinate third-party penetration testing efforts.
• They will support security audits, lead incident response efforts, and implement continuous monitoring and threat intelligence.
• Collaboration with Data & Technology, Quality, and IT teams is essential to integrate security requirements into software products and data platforms.
• The engineer will also develop and maintain security policies, evaluate security technologies, and provide guidance and training to internal teams.

Requirements:

• Candidates must have 8+ years of experience in Information Security with a focus on healthcare security solutions.
• A BS/BA in Computer Science, Cybersecurity, or equivalent relevant experience is required.
• Relevant certifications such as CISSP, CISM, CISA, CEH, etc., are preferred.
• Strong knowledge of HIPAA, HITRUST, ISO 27001, NIST, and other healthcare security regulations is necessary.
• Experience in configuring and managing security technologies such as SIEM, EDR, firewalls, IDS/IPS, and cloud security tools is required.
• A strong understanding of cryptographic principles, IAM, and endpoint security is essential.
• Expertise in securing cloud environments (AWS preferred) and in-house developed software applications is needed.
• Hands-on experience with DevSecOps practices and secure SDLC methodologies is required.
• Strong interpersonal and communication skills are a must for effective collaboration with cross-functional teams.
• Candidates should embody the values of generosity, curiosity, and humility.

Benefits:

• The expected salary range for this position is between $145,000 and $183,000, with actual pay determined by experience, qualifications, and geographic location.
• N-Power Medicine offers equity at hire and a discretionary annual bonus based on company performance.
• This position is eligible for company benefits, including a balanced and flexible work environment.
• The company provides competitive industry benefits, a 401K plan, and other great company perks.
• N-Power Medicine is committed to diversity and is an Equal Opportunity Employer.