Security Operations Engineer
DeepHealth
Opportunity published from Recruitee · applications stay with the original hiring source.
About this opportunity
About the opportunity: The Security Operations Engineer builds and operates security controls, tooling, and automation across DeepHealth's cloud and corporate environments.
This role configures, integrates, and maintains the enterprise security tooling stack, develops detection content, and automates security operations tasks to ensure controls are repeatable, version-controlled, and auditable.
Operating within a regulated healthcare environment with obligations under HIPAA, ISO/IEC 27001, and SOC 2, this position collaborates with Cloud Operations, Platform, and Application Development.
The role reports to the Director, Security Operations, with a future reporting line to the Manager, Security Operations.
Key responsibilities
- Build, configure, integrate, and tune the enterprise security tooling stack, detection content, correlation rules, and response automation across cloud and corporate environments.
- Administer endpoint detection and response tooling, onboard log sources, and integrate security tooling with adjacent platforms via APIs.
- Implement security configurations, guardrails, baselines, and infrastructure-as-code using Terraform across Google Cloud Platform, Amazon Web Services, and Microsoft Azure.
- Configure and maintain Microsoft 365 and Entra ID security controls, least-privilege access models, container and Kubernetes security, and secrets management practices.
- Operate vulnerability management tooling, provide technical remediation guidance, and implement engineering fixes for security-owned tooling and configurations.
- Support incident detection and response through technical investigation, log analysis, threat escalation handling, and participation in post-incident reviews and tabletop exercises.
- Document engineering changes, produce runbooks, and support audit, certification, and customer assurance activities by generating technical evidence.
Qualifications
- 4+ years of hands-on experience in security operations, security engineering, or a comparable technical security role, alongside a Bachelor's degree in information technology, computer science, cybersecurity, or equivalent experience.
- 2+ years of hands-on cloud security experience across at least one major cloud provider (GCP and AWS preferred) and 2+ years operating and tuning a SIEM platform.
- 1+ year administering Microsoft 365 and Entra ID security controls in a hybrid directory environment.
- Working knowledge of security automation, infrastructure-as-code (Terraform preferred), cloud security posture management, container and Kubernetes security, and secrets management.
- Practical experience with EDR tooling, vulnerability management, and scripting capabilities in Python, PowerShell, or Bash.
- Familiarity with security frameworks including NIST CSF, ISO/IEC 27001, and HIPAA, plus the ability to communicate technical findings clearly and support incident response outside standard hours.
- Microsoft Office experience and ability to manage assigned work independently.
Nice to have
- Industry certifications such as Security+, CompTIA CySA+, or a cloud provider security certification.
- Experience in healthcare, medical device, or another regulated industry with working familiarity of HIPAA obligations.
- Experience working alongside or integrating with a managed security service provider.
Job details
- Salary: 110,000-120,000 USD dependent upon experience
- Location: Remote
- Travel: Up to 10% domestic or international travel required
- Work Authorization /
Visa Sponsorship
DeepHealth does not provide immigration sponsorship for this position, including sponsorship for employment-based visas. Candidates must be legally authorized to work in the United States without current or future sponsorship from DeepHealth.
About the company: DeepHealth operates in the healthcare technology sector, providing advanced solutions within a regulated global operating footprint. The company maintains strict standards for data privacy, compliance, safety, and confidentiality across all environments.
Application: UpVagas lists this opportunity from the hiring company or its recruitment platform. The application is completed at the original source.
