Note: The job is a remote job and is open to candidates in USA. AON Central Services, LLC, part of American Oncology Network, is hiring a Lead Security Engineer to provide hands-on technical leadership for its enterprise security program. The role oversees security tools, threat detection, incident response, vulnerability management, compliance, and security partners, while leading a team and protecting patient information and clinical operations.
Responsibilities
- Own and administer the security technology stack, including SIEM/SOAR, endpoint protection, email security, privileged access management, and secure network access
- Maintain and optimize Rapid7 InsightIDR, InsightVM and InsightConnect, Bitdefender GravityZone, Mimecast, Delinea Secret Server, and Cato security configurations and coverage
- Secure Microsoft 365, Azure and other cloud/SaaS environments by establishing configuration baselines and monitoring security posture
- Manage security tool licensing, coverage, and renewal inputs to maintain appropriate protection and cost-effective utilization
- Lead security event triage and incident investigations in partnership with the managed detection and response provider; coordinate containment, recovery, and post-incident reviews
- Oversee vulnerability scanning, prioritization, remediation, and patch management across endpoints, servers, cloud platforms, and network infrastructure
- Document risks associated with legacy systems and validate compensating controls where timely remediation is not feasible
- Develop response runbooks, technical standards, and repeatable procedures to support consistent security operations
- Strengthen identity and access security through multifactor authentication, conditional access, privileged access management, joiner/mover/leaver controls, and periodic access reviews
- Coordinate annual HIPAA- and NIST-aligned security risk assessments, vulnerability assessments, and penetration tests with external assessment partners
- Track and drive remediation of assessment findings and security gaps, communicating technical risks and priorities to stakeholders
- Assess security risks arising from third-party vendors, integrations, newly onboarded sites, and acquired practices
- Serve as the technical lead and primary day-to-day accountability point for managed service and security partners, including ATG and Rapid7 MDR
- Validate provider deliverables, service quality, investigation work, and adherence to contractual service-level agreements
- Escalate gaps and coordinate corrective action with internal IT stakeholders and external partners
- Promote clear documentation, ownership, and communication across security operations and partner workflows
- Lead, mentor, and develop security staff by establishing priorities, reviewing deliverable quality, and building technical capabilities
- Provide practical guidance during complex security investigations, remediation activities, and operational issues
- Identify opportunities to improve security workflows through PowerShell, Python, and other scripting or automation methods
- Communicate security risks, operational priorities, and remediation progress clearly to nontechnical leaders and clinical stakeholders
Skills
- 8+ years of information security or security engineering experience, including hands-on operation of production security tools
- 2+ years leading or mentoring security staff
- Experience overseeing MSP, MSSP, or MDR providers; leading security investigations; and administering SIEM/XDR and vulnerability management technologies
- Knowledge of HIPAA, HITECH, and healthcare security frameworks (HITRUST, NIST CSF)
- Practical experience with endpoint, email, network, cloud, and privileged access security, including Microsoft 365, Azure, Entra ID, Rapid7 InsightIDR and InsightVM
- Security Engineering
- Incident Response
- Vulnerability Management
- Identity and Access Management
- Cloud Security
- Vendor Oversight
- Security Compliance
- Team Leadership
- Scripting and Automation (PowerShell/Python)
- Technical Risk Communication
- Bachelor's degree in information security, Computer Science or related field preferred
- Healthcare or multisite provider experience, EHR familiarity (e.g., OncoEMR), and M&A or new-site security integration
- CISSP, GIAC (GCIH, GCIA, GSEC), CCSP, or Microsoft security certifications
Benefits
- Remote position
- Flexible hours
- Ergonomic home office guidance
- Communication software accessibility
Company Overview
Company H1B Sponsorship