Senior Cyber Security Engineer

RLDatix is hiring a Senior Cyber Security Engineer to mature the security posture of its cloud-based healthcare SaaS solutions and supporting Microsoft 365 environment. The role leads vulnerability management and incident response, strengthens cloud and endpoint controls, and supports compliance, customer security reviews, audits, and risk management.

Responsibilities:

• Lead vulnerability management activities across Azure, Microsoft 365, and SaaS environments to identify risks, prioritize remediation efforts, and reduce organizational exposure
• Monitor and strengthen cloud, endpoint, identity, and data protection controls in order to proactively defend against evolving cyber threats
• Coordinate incident response activities, including ransomware, phishing, account compromise, and business email compromise investigations to minimize operational and security impacts
• Partner with Engineering, DevOps, Privacy, and Infrastructure teams to implement secure configurations, logging, monitoring, and compliance-focused controls
• Manage HITRUST, HIPAA, and NIST-aligned security initiatives while supporting customer security reviews, audit activities, governance documentation, and risk management programs

Requirements:

• 5+ years of experience in cybersecurity engineering, security operations, security consulting, or a related information security role
• Proven success leading vulnerability management programs, security remediation efforts, and incident response investigations from triage through resolution
• In-depth knowledge of cybersecurity frameworks and regulatory requirements, including HITRUST, HIPAA, NIST CSF, NIST 800-53, ISO 27001, SOC 2, or similar standards
• Sincere interest in protecting healthcare data, advancing security best practices, and supporting patient safety through technology
• A knack for working collaboratively across technical and business teams within a fast-paced, highly regulated healthcare technology environment
• Experience securing Microsoft Azure and Microsoft 365 environments, including Entra ID, Defender, Sentinel, Intune, Purview, and Conditional Access
• Experience developing automation and operational efficiencies using PowerShell and/or Python
• Experience maintaining or preparing for HITRUST certification assessments
• Experience completing customer security assessments, including SIG, CAIQ, HECVAT, and healthcare-specific security questionnaires
• CISSP preferred
• Security+, CCSP, CISA, HITRUST CCSFP, Azure Security Engineer, or similar certifications are a plus