Senior Security Engineer

RSi is a healthcare revenue cycle management company recognized as a 'Best in KLAS' firm. They are seeking a Senior Security Engineer to manage the technical aspects of their security program, ensuring the integrity of sensitive data and compliance with industry standards.

Responsibilities:

• Run NinjaOne for RMM, patching, and endpoint hygiene across the workforce
• Administer EDR coverage on Windows, macOS, and server workloads
• Work with Infrastructure on Entra ID security — conditional access, PIM, MFA, Defender for Identity
• Keep least-privilege honest across on-prem AD, Entra ID, and our federated SaaS
• Own Rapid7 InsightVM and InsightIDR as our primary vulnerability and SIEM platform
• Run vulnerability management end to end: scanning, prioritization, SLAs, exceptions, executive reporting
• Tune detections, triage alerts, and lead investigations
• Coordinate pen tests and chase the remediation through to close
• Harden workloads across Azure and AWS — network segmentation, secrets, workload identity
• Configure Microsoft Defender for Cloud and Sentinel; integrate signal with Rapid7 where it makes sense
• Administer AWS-native tooling: GuardDuty, Security Hub, IAM Access Analyzer, CloudTrail, Config, KMS
• Partner with DevOps to pull security into CI/CD and IaC reviews rather than bolt it on after
• Lead containment, eradication, and recovery when we have a security incident
• Keep the IR plan current and run tabletops with IT and executive stakeholders
• Maintain detection coverage mapped to MITRE ATT&CK
• Handle forensic collection in a way that holds up in a HIPAA environment
• Evidence controls for HIPAA, PCI-DSS, SOC 2, and client security questionnaires
• Support our NIST CSF and NIST AI RMF alignment, including the GenAI program
• Help with third-party risk reviews for vendors, clients, and acquired entities
• Write the policies and runbooks. Keep them usable

Requirements:

• 7+ years in security engineering, with at least 3 in a senior or lead role
• Hands-on NinjaOne experience, or a comparable enterprise RMM platform
• Real operational time in Rapid7 InsightVM and InsightIDR — tuning, reporting, workflow
• Solid Azure security skills: Defender for Cloud, Sentinel, Entra ID, Key Vault, Azure Policy
• Working knowledge of AWS security: GuardDuty, Security Hub, IAM, CloudTrail, KMS
• Experience securing a Microsoft 365 tenant, including Defender for Office 365
• PowerShell scripting
• Python or KQL is a plus
• HIPAA or similar regulated-industry background
• You can write clearly and hold your ground in front of non-technical executives
• CISSP, CCSP, GCIH, AZ-500, SC-200, or AWS Certified Security – Specialty
• Healthcare RCM experience, or familiarity with Latitude by Genesis
• Time spent on GenAI or LLM security — data loss prevention, prompt and output governance
• M&A IT integration experience
• SOC 2 or HITRUST audit history