Cyber Security Lead

Alara Imaging is revolutionizing medical imaging workflows. A leading provider of modern medical imaging integration solutions for health systems and health technology companies, our software offers a seamless, affordable, and scalable approach to radiology measure compliance while ensuring medical imaging security and data flow visibility. 
We are seeking a remote-based Security Lead to own and maintain robust security programs for Alara Imaging. As Security Lead, your primary responsibilities are protection of sensitive healthcare data and compliance with industry regulation. You will not only maintain Alara’s high standards for product security, but continually elevate them. You will report to Alara’s CTO and work closely with our engineering and product team. 

Responsibilities

• Safeguard Alara software applications, infrastructure, and networks from potential threats  
• Provide technical leadership to define, implement, and support Risk Management Frameworks, security policies, procedures, and standards 
• Regularly conduct and/or support third party security assessments and audits for HIPAA, SOC-II, HITRUST, CHIT and other relevant certifications  
• Guide product feature designs and product implementations for adherence to secure architectural practices 
• Ensure code vulnerability detection and remediation are addressed in accordance with SLAs 
• Assess risks and vulnerabilities; proactively enhance Alara security posture and protections 
• Implement tools and practices which comply with and adhere to CIS benchmarks 
• Collaborate closely with GTM, engineering, and product teams to integrate security best practices into every stage of our SDLC 
• Build a security culture of awareness and shared responsibility  

Requirements

• 10+ years of experience in IT security, including infrastructure and application development 
• Must have healthcare regulatory security experience 
• Excellent understanding of fundamentals, frameworks, development methodologies, network, firewalls, communication layers, devices/end points, computing environment 
• Deep understanding of Threats, Threat Modeling, Security Vulnerabilities, Risk, Cybersecurity frameworks, policies and Cybersecurity standards 
• Experience designing and implementing cloud security architectures 
• Experience with identity and access management 
• Experience developing and evaluating security documentation, including system security plans, contingency plans, security procedures, and continuity of operations plans 
• Experience with DevSecOps and integrating security into the development process 

Alara Imaging is committed to creating a diverse environment and is proud to be an equal opportunity employer.   Alara Imaging prides itself on offering healthcare and other benefits to its full-time employees.