Jobs and Careers
HE
Security Engineer / Analyst
HealthVerityPhiladelphia, United Statesfull_timeVerifiedPosted 14 Dec 2023
About the role
How you will helpAs a part of our SecOps team, you will be at the front line of our security monitoring, risk assessment, escalation, and remediation processes. You will deep dive on every security alert, help tune monitoring and alerting systems, and investigate all avenues of risk to our people, systems, and data.
What you will do• Develop and implement actions to assist with securing applications, code and end-users including: • Managing static code analysis and remediation • Administering endpoint detection and response tooling• Administer the organization’s security incident and event management systems and lead security logging and incident event review activities• Assist with triaging and developing actions for addressing security issues• Assist with administering security tooling for compliance, vulnerability scanning, and network security scanning • Assist with identifying required security patches and updates for identified vulnerabilities and based upon subscribed feeds • Participate in incident response exercises and recommend improvements for responding to security incidents and events • Participate in disaster recovery/business continuity exercises and identify improvements and changes as needed• Scheduling and execution of monthly, quarterly, and annual security reviews and assessment activities and follow-up with staff on any issues found.
How success will be defined• Becoming familiar with HIPAA and the NIST 800-53 cyber security framework• Tracking and keeping up to date on data science tools and distributed computing methodologies• Your ability to work with scalable and/or cluster compute architectures• Your knowledge of the importance of security monitoring tools and how to use them to protect, detect, respond and recover from security incidents • Your proficiency with Shell scripting, Python, Ruby, or similar languages
Required skills • 2 or more years of system administration experience using Linux focused on patching, configuration management, and vulnerability remediation• Basic knowledge of scripting in Python and Bash• Working knowledge of security tooling including Nmap, Nessus or Qualys, Zero-trust concepts, security incident & event management other security related tools
Desired skills• Understanding of data network configuration and infrastructure concepts, including TCP/IP, DNS, routers, internet/intranet/extranet, firewalls, web servers and security hierarchy including the application of encryption key infrastructures and authentication processes.Base salary for the role is commensurate with experience and can range between 65,000 - 190,000 + annual bonus opportunity.
Hiring LocationsWhile HealthVerity does support remote work with quarterly travel to our Philadelphia headquarters, our strong preference is to hire team members in the areas below as well as approved states in the Eastern Time Zone. Expansion beyond these markets will occur only when necessary.
• Boston, Massachusetts• New York City, New York• Philadelphia, Pennsylvania• Baltimore, Maryland• Washington D.C• Charlotte, North Carolina• Raleigh-Durham, North Carolina• Atlanta, Georgia
Approved States in the Eastern Time Zone include: CT, DE, FL, GA, IN, MA, MD, MI NC, NJ, NY, OH, PA, RI, TN, and VA.
About HealthVerityHealthVerity synchronizes transformational technologies with the nation’s largest healthcare and consumer data ecosystem to power previously unattainable outcomes and fundamentally advance the science. We offer a comprehensive, yet flexible approach, based on the foundational elements of Identity, Privacy, Governance and Exchange (IPGE), that synchronizes unparalleled Identity management with built-in Privacy compliance and Governance, providing the ability to discover and Exchange a near limitless combination of data at a record pace. Together with our partners in life sciences, government and insurance, we are Synchronizing the Science. To learn more about HealthVerity, visit healthverity.com.
Why you'll love working here
We are making a difference – Our technology is at the forefront of some of the biggest healthcare challenges in the world. We are one team – Our people define our culture and always will. We take time out to celebrate each other at the end of every week through company-wide shout outs, and acknowledge the value that each of us adds towards our greater mission. Come share all you have to offer.We are learners – Every team member is continually learning, no matter if we've been in a role for one year or much longer. We are committed to learning and implementing what is best for our clients, partners, and each other.
Benefits & Perks• Compensation: competitive base salary & annual bonus opportunity (for non-commissioned roles)• Benefits: comprehensive benefits with coverage on Day 1, medical, dental, vision, 401k, stock options• Flexible location: our HQ is in Philadel
What you will do• Develop and implement actions to assist with securing applications, code and end-users including: • Managing static code analysis and remediation • Administering endpoint detection and response tooling• Administer the organization’s security incident and event management systems and lead security logging and incident event review activities• Assist with triaging and developing actions for addressing security issues• Assist with administering security tooling for compliance, vulnerability scanning, and network security scanning • Assist with identifying required security patches and updates for identified vulnerabilities and based upon subscribed feeds • Participate in incident response exercises and recommend improvements for responding to security incidents and events • Participate in disaster recovery/business continuity exercises and identify improvements and changes as needed• Scheduling and execution of monthly, quarterly, and annual security reviews and assessment activities and follow-up with staff on any issues found.
How success will be defined• Becoming familiar with HIPAA and the NIST 800-53 cyber security framework• Tracking and keeping up to date on data science tools and distributed computing methodologies• Your ability to work with scalable and/or cluster compute architectures• Your knowledge of the importance of security monitoring tools and how to use them to protect, detect, respond and recover from security incidents • Your proficiency with Shell scripting, Python, Ruby, or similar languages
Required skills • 2 or more years of system administration experience using Linux focused on patching, configuration management, and vulnerability remediation• Basic knowledge of scripting in Python and Bash• Working knowledge of security tooling including Nmap, Nessus or Qualys, Zero-trust concepts, security incident & event management other security related tools
Desired skills• Understanding of data network configuration and infrastructure concepts, including TCP/IP, DNS, routers, internet/intranet/extranet, firewalls, web servers and security hierarchy including the application of encryption key infrastructures and authentication processes.Base salary for the role is commensurate with experience and can range between 65,000 - 190,000 + annual bonus opportunity.
Hiring LocationsWhile HealthVerity does support remote work with quarterly travel to our Philadelphia headquarters, our strong preference is to hire team members in the areas below as well as approved states in the Eastern Time Zone. Expansion beyond these markets will occur only when necessary.
• Boston, Massachusetts• New York City, New York• Philadelphia, Pennsylvania• Baltimore, Maryland• Washington D.C• Charlotte, North Carolina• Raleigh-Durham, North Carolina• Atlanta, Georgia
Approved States in the Eastern Time Zone include: CT, DE, FL, GA, IN, MA, MD, MI NC, NJ, NY, OH, PA, RI, TN, and VA.
About HealthVerityHealthVerity synchronizes transformational technologies with the nation’s largest healthcare and consumer data ecosystem to power previously unattainable outcomes and fundamentally advance the science. We offer a comprehensive, yet flexible approach, based on the foundational elements of Identity, Privacy, Governance and Exchange (IPGE), that synchronizes unparalleled Identity management with built-in Privacy compliance and Governance, providing the ability to discover and Exchange a near limitless combination of data at a record pace. Together with our partners in life sciences, government and insurance, we are Synchronizing the Science. To learn more about HealthVerity, visit healthverity.com.
Why you'll love working here
We are making a difference – Our technology is at the forefront of some of the biggest healthcare challenges in the world. We are one team – Our people define our culture and always will. We take time out to celebrate each other at the end of every week through company-wide shout outs, and acknowledge the value that each of us adds towards our greater mission. Come share all you have to offer.We are learners – Every team member is continually learning, no matter if we've been in a role for one year or much longer. We are committed to learning and implementing what is best for our clients, partners, and each other.
Benefits & Perks• Compensation: competitive base salary & annual bonus opportunity (for non-commissioned roles)• Benefits: comprehensive benefits with coverage on Day 1, medical, dental, vision, 401k, stock options• Flexible location: our HQ is in Philadel
Apply for this role
Generate a tailored application kit with a matched cover letter, interview prep, and CV highlights — in under 60 seconds.
Apply Now →Generate Application KitFree account required — sign up in 30s