Senior Security Engineer

@ Health Gorilla

About the Role

As a Senior Security Engineer at Health Gorilla, you will help secure platforms that power nationwide health data exchange, protect patient privacy, and ensure compliance in a cloud-native, high-scale environment.

Key Responsibilities

• Define and refine information security systems management policies.
• Conduct vendor and 3rd party audits and complete security questionnaires.
• Perform risk assessments and remediate identified vulnerabilities.
• Create AWS Cloud Formation templates, Ansible scripts, and automate processes with AWS Systems Manager.
• Utilize AWS-native security services (GuardDuty, Security Hub, Macie, Inspector, IAM, KMS, CloudTrail, Config) to design, monitor, and enforce security controls.
• Implement identity and access management best practices for HIPAA compliance.
• Architect and operationalize security guardrails with AWS Config, SCPs, Lambda functions, and EventBridge.
• Monitor incidents using GuardDuty, CloudWatch, and CloudTrail integrated with SIEM/SOAR platforms.
• Deploy and manage CrowdStrike Falcon EDR for endpoint visibility and threat response.
• Conduct threat hunting and investigation using CrowdStrike tools.
• Serve as the central contact for 3rd party audits (SOC2, ISO, HIPAA, HITRUST) and GRC functions.

Required Skills and Experience

• Expertise with Linux and AWS ecosystems.
• Proven experience in regulated environments (HIPAA, HITRUST, SOC 2).
• 7+ years in security engineering with enterprise or cloud focus.
• 3+ years working with intrusion detection, VPN, vulnerability tools, and configuration management systems.
• Strong knowledge of SIEM, SOAR, Incident Response, and Threat Intelligence.
• Relevant certifications such as AWS Security, CISSP, or CCSP.
• Bachelor's degree in Computer Science or equivalent work experience.

What Health Gorilla Offers

• Competitive base salary and stock options.
• 401(k) plan with annual matching.
• Medical, dental, and vision insurance.
• Short and long-term disability, life insurance, and wellness support.
• Unlimited PTO plus 12 holidays.
• Paid parental leave and monthly stipends for phone, internet, and home office equipment.

Key skills/competency

• Security Engineering
• AWS
• Compliance
• Risk Assessment
• Cloud Security
• Incident Response
• Linux
• Threat Hunting
• Automation
• Cryptography