Sr. Security Engineer

About DrFirst

Here is a remarkable chance for you to join a thriving Healthcare IT company with established products, prestigious clients, substantial revenue, blue-chip institutional investors, and continuous growth.  At DrFirst, you will collaborate with brilliant minds, tackling unique healthcare challenges on an unprecedented scale.  Our culture is entrepreneurial, collaborative, and fast-paced—ideal for those who seek personal and professional growth while working alongside intelligent colleagues. If you're enthusiastic about pushing your limits, unlocking your potential, and thriving in a dynamic team, we're eager to connect with you!

Position Overview

The Senior Security Engineer will be responsible for supporting DrFirst’s corporate (serving internal users) and production network (supporting customers).  This role places heavy emphasis on thought leadership and execution of security principles to continually ensure DrFirst networks, and the products we license to customers reflect best practices in the prevention of security vulnerabilities and incidents.

 

Who will love this job

 

• An Innovator: who thinks outside the box to introduce new methods, ideas, and products
• A Problem solver: who is passionate about using technology to solve complicated problems, and harnessing the power of data to adopt new tactics to enhance efficiency and scalability
• A Team builder: who enjoys coaching developers, product owners and other security team members in understanding security principles; attracting and retaining A-players
• A Trusted advisor: someone with strong leadership acumen who always strives to do better tomorrow than today, and continuously improve DrFirst security program
• A Driver: who works with purpose and passion; someone who will elevate our technical teams through new perspectives, ideas, and solutions
• A Collaborator: who can navigate internal teams together to deliver best in class products contributing to DrFirst’s market share and profitability targets.

What you will work on

Network/Infrastructure 

• Use Ansible and Terraform to efficiently manage production infrastructure
• Implement "Infrastructure as Code" leveraging standard orchestration tools 
• Monitor the network functions and performance daily
• Diagnose and remediate distributed application outages and performance issues
• Maintain logging infrastructure consisting of ELK stack 
• Ensure critical system monitoring is setup using Zabbix and AppDynamics 
• Select and implement security tools, policies, and procedures in conjunction with the company’s security team
• Lead calls with delivery teams to achieve timely resolution of security vulnerabilities
• Plan and execute network maintenance and system upgrades including service packs, patches, hot fixes and security configurations
• Monitor system resource utilization, trending, and capacity planning
• Provide Level-2/3 support and troubleshooting to resolve issues
• Perform disaster recovery operations and record backups when required
• Contribute to security configuration for AWS
• Provide evidence for security audits like SOC 2 Type 2 and HITRUST 

Design 

• Act as a thought leader and get buy-in and collaboration for integrating security principles into our architectural vision and strategy 
• Manage remediation and prevention of application security vulnerabilities against OWASP Top 10 with product and development teams
• Contribute to design of to understand their business workflow and to ensure requirements are detailed and documented accordingly
• Design and develop reusable, scalable, flexible, and high-performing network services, and systems
• Prepare design documents and give presentations for formal technical reviews

Problem Solving 

• Demonstrate critical thinking, root cause analysis, and issue dissection with the team to produce the best solution
• Analyze and interpret technical data
• Demonstrate outstanding attention to detail and communication skills
• Demonstrate good knowledge of operating system design and tuning

 

Execution & Delivery 

• Execute planned work and deliver items on schedule and on time
• Proactively work within your team, as well as across teams and departments, to resolve blockers
• Communicate progress and challenges to your manager and/or tech leadership in a timely manner
• In the case of blockers or problems, prepare for the discussion by identifying the facts and supporting materials relating to the issue as well as suggestions for moving forward