[Hiring] Threat Defense Engineer @Fortified Health Security

Role Description

The Threat Defense Engineer is responsible for engineering, implementing, optimizing, and maturing the technologies and technical processes that support Fortified’s managed security services. Operating within a multi-client Managed Security Service Provider (MSSP) environment, the Engineer serves as a subject matter expert across various security technologies used in service delivery. The role focuses on:

• Security platform health
• Detection engineering
• Telemetry and log management
• Technical troubleshooting
• Automation and standardization
• Resolving complex service-impacting issues

The Engineer works closely with clients, Security Operations, Threat Hunting, Incident Response, internal engineering teams, and technology vendors to ensure services are scalable, reliable, repeatable, and effective. The role also supports client onboarding, technical meetings, architecture discussions, training, and pre- and post-sales activities, focusing on driving security, standardization, efficiency, and continuous service improvement.

Qualifications

• Bachelor's Degree in Computer Science, Management Information Systems, or other relevant combination of training and experience
• 2+ years operating in an MSSP, MDR provider, enterprise SOC, or similar multi-client security environment
• 3+ years of hands-on experience administering, engineering, or supporting enterprise security platforms
• 3+ years of professional cybersecurity experience
• Experience supporting complex, distributed, or multi-tenant security environments
• Advanced systems administration, integration, and technical troubleshooting experience
• Healthcare industry experience preferred; familiarity with HIPAA, HITRUST, NIST, and other relevant security frameworks

Requirements

• Provide deep technical understanding of tools and processes used to support the delivery of Fortified’s managed services.
• Engineer, implement, configure, maintain, and optimize SIEM, EDR/MDR, IoMT, DLP, cloud, network, identity, and related security technologies.
• Partner with clients on onboarding, implementation, configuration, service health reviews, and technical improvements across supported lines of business.
• Support multi-tenant MSSP environments by promoting standardized, repeatable configurations while accounting for documented client-specific requirements.
• Monitor and maintain the health, availability, performance, connectivity, and effectiveness of security platforms and integrations.
• Troubleshoot complex issues involving agents, APIs, collectors, log forwarding, authentication, networking, integrations, and security data pipelines.
• Provide guidance on log source ingestion, parsing, normalization, filtering, retention, validation, and telemetry quality.
• Design, create, test, tune, and maintain detections, correlation rules, suppression logic, exclusions, watchlists, and other security content.
• Analyze alert volume, false positives, and detection performance to improve actionable security coverage without reducing necessary visibility.
• Perform advanced technical investigations and root cause analysis for security platform issues, escalations, detection gaps, and service-impacting events.
• Develop scripts, API integrations, automation, and internal tooling to improve operational efficiency and reduce repetitive manual processes.
• Create reusable engineering standards, configuration baselines, templates, and workflows that improve scalability and consistency across the client base.
• Validate security telemetry and detection coverage to identify logging, visibility, integration, and control gaps.
• Work directly with technology vendors to troubleshoot defects, resolve escalations, evaluate capabilities, and improve platform integrations.
• Support Threat Hunting and Incident Response activities through telemetry enablement, query development, technical analysis, and detection validation.
• Collaborate with Security Operations, Threat Hunting, Incident Response, and Engineering teams to ensure strong knowledge transfer and effective escalation paths.
• Create, maintain, and mature Standard Operating Procedures (SOPs), architecture documentation, troubleshooting guides, implementation standards, and training materials.
• Mentor junior technical staff on security platforms, investigation techniques, detection logic, troubleshooting, and engineering concepts.
• Lead technical presentations, demonstrations, workshops, architecture discussions, customer training, and solution design sessions for internal and external stakeholders.
• Provide pre-sales and post-sales technical support, including solution recommendations, architecture guidance, demonstrations, and technical validation as needed.
• Maintain current knowledge of security technologies, emerging threats, industry trends, and healthcare security requirements, and ensure HIPAA Privacy and Security responsibilities are consistently followed.

Company Description