[Hiring] Senior Information Security Engineer @The Auctus Group

Role Description

We’re looking for a Senior Information Security Engineer to strengthen security across our cloud infrastructure, Microsoft 365 environment, endpoints, and business applications. This is a hands-on, senior individual contributor role with ownership of security engineering, threat detection, incident response, vulnerability management, and technical controls supporting our SOC 2 Type II and HIPAA compliance objectives. Reporting to the VP of Technology, you’ll work closely with IT, Engineering, and Compliance to identify risks, implement practical solutions, and verify that security controls work effectively. The initial focus will be approximately:

• 60% security engineering and operations
• 40% technical controls, assurance, and audit readiness

You’ll have the opportunity to shape our security capabilities and turn security requirements into measurable technical improvements.

Qualifications

• At least 5 years of hands-on experience in information security engineering, cloud security, security operations, or a related technical security role.
• Demonstrated experience securing Microsoft 365 and Microsoft Entra ID environments.
• Strong understanding of enterprise security architecture, identity management, endpoint protection, and cloud security controls.
• Hands-on experience with endpoint detection and response (EDR), vulnerability management, centralized logging, and security incident investigation.
• Experience implementing and validating technical security controls, with working knowledge of SOC 2 Type II and the HIPAA Security Rule.
• Ability to develop scripts and automation using technologies such as PowerShell, Python, Microsoft Graph, KQL, or equivalent tools.
• Strong troubleshooting, documentation, and risk-prioritization skills.
• Ability to work independently, collaborate across technical and compliance teams, and explain security risks clearly to nontechnical stakeholders.

Requirements

• Experience supporting healthcare organizations, healthcare technology companies, or environments that process PHI.
• Experience securing AWS and virtualized infrastructure, including networking, firewall, and backup and recovery controls.
• Familiarity with Microsoft Defender, Sentinel, Purview, or comparable security monitoring, data protection, endpoint management, and compliance automation tools.
• Experience with continuous control monitoring, audit evidence collection, and security integrations through REST APIs.
• Experience assessing security risks in AI-enabled applications, agents, or automated workflows.
• Relevant certifications such as CISSP, CISM, CCSP, CompTIA Security+, or Microsoft security certifications.
• Certifications are valued, with demonstrated technical capability and practical experience central to this role.