About Us
Designing the experiences people want next and continually improving to delight and disrupt.
Job Description
This is a remote position.
We are seeking a highly skilled and motivated
Cyber Security Engineer
to join our dynamic team. In this role, you will be responsible for developing, implementing, and managing security measures to protect our clients’ sensitive data and ensure compliance with regulatory requirements, including HIPAA and NIST frameworks.
The ideal candidate will have a strong background in cybersecurity, with deep expertise in
HIPAA compliance
,
NIST standards
, and relevant industry best practices.
Key Responsibilities:
Security Design & Implementation:
Design, implement, and maintain secure network systems, applications, and infrastructure for client environments, ensuring compliance with HIPAA and NIST standards.
Risk Assessment & Vulnerability Management:
Perform regular risk assessments and vulnerability testing to identify potential threats to systems and data. Develop and implement remediation strategies.
Compliance & Documentation:
Ensure all security processes and activities are aligned with HIPAA, NIST, and other relevant industry standards. Maintain comprehensive documentation related to security policies, incidents, and procedures.
Incident Response & Monitoring:
Monitor systems for security breaches and respond to security incidents swiftly, following best practices for remediation. Lead the investigation and analysis of security incidents, including forensic analysis.
Policy & Process Development:
Develop and implement security policies, procedures, and practices that align with HIPAA and NIST guidelines. Collaborate with other teams to ensure that security is integrated across all operations.
Security Audits & Reporting:
Perform periodic security audits and assessments to evaluate the effectiveness of security controls. Prepare reports for internal stakeholders and regulatory bodies as needed.
Collaboration & Training:
Work closely with IT, operations, and management teams to ensure cybersecurity best practices are followed across the organization. Provide training and awareness programs on security protocols and compliance.
Required Skills & Experience:
Proven experience in cybersecurity roles with a focus on
HIPAA compliance
and
NIST cybersecurity frameworks
.
In-depth knowledge of industry regulations, including
HIPAA, NIST, PCI DSS, and other security standards
.
Strong experience with security technologies (firewalls, intrusion detection/prevention systems, VPNs, etc.).
Familiarity with cloud security platforms and services (AWS, Azure, Google Cloud).
Hands-on experience with security monitoring tools and SIEM solutions (Splunk, Sentinel, etc.).
Expertise in encryption technologies, vulnerability management, and identity access management.
Proficiency in security best practices and disaster recovery planning.
Strong analytical and problem-solving skills with attention to detail.
Ability to work under pressure, manage multiple tasks, and meet deadlines.
Preferred Qualifications:
Certified Information Systems Security Professional (CISSP)
Certified Information Security Manager (CISM)
Certified HIPAA Professional (CHP)
Experience with incident management and recovery procedures.
Familiarity with security automation and orchestration tools.