Note: The job is a remote job and is open to candidates in USA. Incredible Health is the largest software and AI-powered healthcare career marketplace, trusted by over 1,500 U.S. hospitals. They are seeking a Senior IT/Security Engineer to own their IT and security practice, responsible for managing compliance, security across their tech stack, and educating the team on security matters.
Responsibilities
- Owning our compliance program end to end: driving our annual SOC 2 Type 2 audits from evidence collection through auditor walkthroughs, and running Vanta as our governance home base year-round
- Completing security questionnaires, addendums, and AI risk assessments for the IT and security teams at our hospital clients — and making sure they understand we're doing the right thing. (Health systems ask great, hard questions. You'll have great answers.)
- Running real BCDR tests and treating them like live incidents to find the gaps before the gaps find us
- Coordinating annual pen tests and driving remediation of findings within SLA
- Managing security across our stack: AWS, Heroku, Cloudflare, Google Workspace, GitHub, and our communication tools
- Administering our laptop fleet for a fully remote team — imaging, shipping, MDM enrollment, inventory, and end-of-life — so every machine is encrypted, managed, and remotely wipeable
- Running access reviews and enforcing least privilege: pruning admin lists, enforcing SSO and 2FA, and tuning password policies
- Ensuring new employees get access to everything they need on day one, and departing ones are locked out the same day — partnering with HR and Finance on a tight onboarding/offboarding loop through Rippling and Google
- Evaluating and securing AI tooling — from how our team uses Claude and MCP servers to partnering with engineering on customer questions about AI risk, bias testing, and model governance. This is a fast-moving frontier and you'll be our guide
- Doing vendor management and procurement reviews, and finding savings while you're at it
- Staying on top of the rapidly evolving AI threat landscape and adapting our defenses and team training as fast as the attackers adapt theirs
- Playing professor and educating our team on everything security
- Advising leadership on security matters during project planning, and working with our full stack engineers to ship improvements you identify
- Being the savior in the event of a security incident — leading response, analysis, and the write-up afterward
- Supporting co-workers when they manage to put their computers in a bad place. (They should enjoy talking to you, and you to them!)
Skills
- At least five years of experience in IT/Security engineering
- Experience owning a SOC 2 Type 2 audit cycle, including evidence collection and auditor interactions
- Strong knowledge of cloud security, particularly AWS and Cloudflare
- Experience deploying and administering IAM, EDR/XDR, SIEM, CSPM, MDM, and GRC platforms like Vanta
- Experience answering security questionnaires from large enterprise or healthcare customers
- Informed opinions about AI security, including securing internal AI tools and evaluating AI vendors
- Experience scaling security to combat phishing and breaches in a fast-paced environment
Benefits
- Our comprehensive benefits package covers medical, dental and vision coverage with shared premiums
- Our company sponsored 401(k) allows you to save for retirement
- Commission and/or equity may be offered based on the position
- Unlimited vacation, so take a break when you need it!
- We have a generous family leave policy so that you can spend time bonding with new additions to your family.
- We welcome candidates with backgrounds that are commonly underrepresented in our industries.
- We deeply value culture, community, and camaraderie amongst our team - we strive to create a work environment that lets you have fun and celebrate (team events and trivia galore!).
Company Overview