[Hiring] Cybersecurity Engineer II @Hanger, Inc.

Role Description

The Cybersecurity Engineer II is responsible for assessing, securing, and integrating technology environments associated with mergers and acquisitions across Hanger's national network of patient care clinics and business operations. This role performs hands-on security engineering, technical assessments, compromise assessment and threat hunting, remediation, and implementation of enterprise security controls across acquired environments.

Your Impact

• Due Diligence and Assessment
  • Support pre-close security due diligence by reviewing target-company security documentation, questionnaire responses, incident and breach history, and external attack surface to identify deal-impacting risks and inform integration planning.
  • Perform technical security assessments across on-premises, cloud, and hybrid environments.
  • Conduct or coordinate compromise assessments and threat hunting in acquired environments before network interconnection, looking for indicators of compromise, persistence mechanisms, unauthorized or stale accounts, and anomalous authentication activity.
  • Conduct vulnerability assessments, coordinate penetration testing of acquired systems, and drive remediation of identified security gaps and misconfigurations.
  • Review acquired-company application portfolios to identify business-critical systems, data sensitivity and PHI locations, authentication methods, integrations, and security risks.
  • Inventory and assess acquired-company vendors, business associates, and sub-processors, and identify gaps in Business Associate Agreements and security-related contract terms.
• Integration and Remediation
  • Define and implement Day 1 security controls for acquired entities, including enforced multifactor authentication, privileged access cleanup, endpoint protection, email security, and centralized logging.
  • Deploy, configure, and support enterprise security tooling and controls within acquired environments.
  • Perform hands-on security hardening of cloud environments, including identity, access controls, network exposure, logging, configuration, and remediation of identified weaknesses.
  • Design and validate secure interconnection and segmentation between acquired and enterprise networks.
  • Integrate acquired environments with enterprise security platforms, controls, and processes.
  • Monitor and analyze security events in acquired environments during the integration window and respond to and investigate incidents.
  • Use PowerShell, Python, or similar scripting to automate discovery, assessment, and onboarding tasks.
• Risk, Compliance, and Collaboration
  • Document technical findings, remediation activities, and residual risks, and produce risk-rated findings and remediation plans.
  • Assess acquired environments against the HIPAA Security Rule and enterprise frameworks and support audit and compliance activities.
  • Develop and maintain the M&A security playbook and contribute to related security policies, standards, and procedures.
  • Collaborate with various teams to support secure integration.
  • Support security awareness and onboarding for acquired-company workforces.

Qualifications

• 5+ years of experience in cybersecurity, security engineering, cloud security, or a related field.
• Bachelor's degree in Computer Science, Cybersecurity, Information Technology, or a related field, or equivalent work experience.
• Hands-on experience securing Active Directory, Microsoft Entra ID, and cloud environments, including Azure and AWS.
• Experience deploying and supporting enterprise security tooling such as endpoint detection and response, SIEM, email security, and firewalls.
• Experience identifying and remediating vulnerabilities and security misconfigurations.
• Must have, or be eligible to obtain, a valid driver’s license.

Requirements

• Experience supporting mergers, acquisitions, divestitures, or large-scale technology integrations.
• Experience with compromise assessments, threat hunting, technical due diligence, or third-party security assessments.
• Healthcare industry experience, including protecting PHI and securing electronic health record systems.
• Experience consolidating identities, endpoints, and email tenants from acquired companies into an enterprise environment.
• Project management skills and the ability to manage multiple integration workstreams concurrently.
• Security and Cloud Certifications: CISSP, CCSP, GSEC, Security+, Microsoft SC-500, AWS Certified Security – Specialty, or equivalent.
• Incident Response Certifications: GCIH, GCFA, or equivalent incident handling and forensics certifications.

Benefits

• Competitive Compensation Packages
• 8 Paid National Holidays & 4 additional Floating Holidays
• PTO that includes Vacation and Sick time
• Medical, Dental, and Vision Benefits
• 401k Savings and Retirement Plan
• Paid Parental Bonding Leave for New Parents
• Flexible Work Schedules and Part-time Opportunities
• Generous Employee Referral Bonus Program
• Mentorship Programs- Mentor and Mentee
• Student Loan Repayment Assistance by Location
• Relocation Assistance
• Volunteering for Local and National events