[Hiring] Senior Security Engineer @Fuze Health

Role Description

As the Senior Security Engineer you will:

• Work closely with many teams across the organization to help align and promote strong security controls and mitigations as well as through architectural reviews.
• Review system design and implementations from multiple teams to assess security posture and make recommendations to architecture from threat modeling.
• Utilize scripts and other useful internal tools to help ensure full coverage of the security agent suite across the enterprise on a variety of platforms.
• Develop automation using Python and other programs to help integrate various systems.
• Write documentation including policies and procedures.
• Oversee the regular execution of vulnerability scanning activities across various environments (e.g., network, containers, cloud).
• Design and implement infrastructure security controls for servers, cloud environments, and container platforms.
• Contribute to compliance initiatives (e.g., HiTrust, ISO 27001) from a security perspective.
• Help contribute to our external-facing requirements including supporting customer and vendor audits.
• Participate in the on-call roster, including hours outside of normal business.

Qualifications

• 4+ years of experience in security engineering, with a strong focus on infrastructure, application and cloud security.
• Hands-on experience securing Kubernetes (K8s) and container platforms in production environments.
• Proficiency in scripting/automation (Python, Bash, Terraform or similar).
• Comfortable working in a fast-paced environment with excellent communication skills.
• Capable of working independently and as part of a team environment.
• Proven work experience in an Engineering discipline.
• Experience in building and maintaining security systems in a Cloud and on-premises environment.
• Hands-on experience in security systems, including firewalls, intrusion detection systems, anti-virus software, authentication systems, log management, content filtering, etc.
• Experience with network security and networking technologies and with system, security, and network monitoring tools.
• Good understanding of the latest security principles, techniques, and protocols and best practices (CIS benchmarks, NIST, OWASP, etc.).
• Familiarity with web related technologies (Web applications, Web Services, APIs) and of network/web related protocols.
• Problem solving skills and ability to work under pressure.
• Travel within the US may be required on an irregular basis (minimal travel).
• BS degree in Computer Science or related field.
• Relevant certifications (e.g., CISSP, CCSP, GIAC, OSCP).

Requirements

• Physical requirements for this role include the ability to work at a computer terminal with monitor, keyboard and mouse for extended periods of time, stoop, bend, and reach for equipment and supplies.
• Make frequent repetitive motions required to operate a computer that include the wrists, hands and fingers.
• Lift, carry, push, pull, and move light objects up to 20 pounds.
• Ability to effectively communicate through verbal interactions, discern auditory information, and visually perceive details to perform essential job functions.

Benefits

• Full-time employee benefits include dental, vision, and multiple group medical plans to choose from.
• 401(k) retirement savings plan.
• Group life insurance, accidental death and dismemberment (AD&D) insurance.
• Flexible spending account (FSA) and health savings account (HSA).
• Commuter benefits.
• Employer-paid short-term (STD) and long-term disability (LTD) insurance.
• Additional supplemental insurance plans (spouse life insurance, legal insurance, an employee assistance program, home health testing kits, and a fertility medication discount program).
• Flexible vacation time, accrued paid sick time, 10 paid holidays, (2 floating holidays for full time non-exempt employees).
• Eight weeks of paid parental leave for eligible employees, additional paid weeks for the birthing parent, 4 weeks paid caregiver leave.
• A Lifestyle Spending Account allowance each month.