Note: The job is a remote job and is open to candidates in USA. Health Plans, Inc. (HPI) is a third-party administrator providing health and benefit solutions to employers. The Information Security Engineer designs, implements, administers, and continuously improves enterprise cybersecurity technologies and controls, supporting security operations, cloud security, identity management, vulnerability management, data protection, incident response, and regulatory compliance.
Responsibilities
- Administer, maintain, monitor, and optimize enterprise cybersecurity platforms, including CrowdStrike, Microsoft security technologies, Zscaler, Varonis, vulnerability management tools, and other approved security solutions
- Monitor platform health, investigate control failures, and ensure security technologies operate effectively and in accordance with approved standards
- Maintain security configurations, documentation, dashboards, reporting, and operational procedures
- Investigate security alerts, suspicious activity, and potential cybersecurity incidents
- Support incident response activities, including identification, analysis, containment, eradication, recovery, documentation, and root cause analysis
- Develop and maintain detection logic, response procedures, and security playbooks
- Assist in securing Microsoft 365, Azure, Microsoft Entra ID, Intune, and hybrid technology environments
- Review cloud and identity configurations and recommend improvements that reduce risk and support Zero Trust principles
- Implement and maintain security baselines, identity protections, Conditional Access controls, privileged access safeguards, and configuration standards
- Perform or support vulnerability assessments and coordinate remediation activities with technology owners
- Validate remediation, track risk reduction, and escalate aging or high-risk vulnerabilities as appropriate
- Assist with data classification, monitoring, access governance, and protection initiatives
- Support Varonis administration, alerting, reporting, investigation, and remediation activities
- Participate in enterprise projects to ensure cybersecurity requirements are incorporated into solution design and implementation
- Develop and maintain security standards, technical procedures, diagrams, and other supporting documentation
- Support internal and external audits, customer assessments, and regulatory examinations, including SOC 2 and HIPAA-related activities
- Assist with evidence collection, control validation, remediation tracking, and responses to audit requests
Skills
- Associate's degree with Industry certification(s)
- Five years of information security, cybersecurity, systems administration, network engineering, or related technology experience
- Two or more years of hands-on security engineering or security platform administration experience
- Experience supporting enterprise security technologies, Microsoft environments, cloud services, or hybrid infrastructure
- Experience participating in security incident response, vulnerability management, or security control implementation
- Zscaler Internet Access (ZIA) and Zscaler Private Access (ZPA)
- Microsoft 365, Azure, Microsoft Entra ID, Intune, and the Microsoft Defender security ecosystem
- CrowdStrike Falcon platform
- Varonis Data Security Platform
- Security Information and Event Management (SIEM) and log management platforms
- Vulnerability scanning and management tools
- Email security, endpoint protection, identity security, cloud security, data protection, and Zero Trust architecture
- Healthcare, insurance, or another regulated industry
- SOC 2, HIPAA, NIST Cybersecurity Framework, or CIS Controls
- Working with Managed Detection and Response (MDR) or other external security service providers
Benefits
- Medical, Dental and Vision and Prescription Drug Coverage
- Fitness Reimbursement Benefit
- Employee Assistance Program
- Flexible Spending Account & Health Savings Account
- 401(k)
- Quarterly Bonuses
- Generous Paid-Time Off
- Volunteering Opportunities
- Educational Assistance & Professional Development Opportunities
- Smart casual dress code
- Ergonomic desks
- Onsite café at the Westborough headquarters
- Beautiful trails at the Westborough headquarters office park
- Campus gyms at the Westborough headquarters
Company Overview