Sr. Staff Security Engineer

Job Description:

The Sr. Staff Security Engineer will help drive continuous improvements in NextGen’s security posture. This role will leverage automation, including nascent technologies, to increase efficiency in security operations.

• Develop and maintain security tooling, guidelines, and standards for the Security Engineering team.
• Collaborate with DevSecOps teams in authoring cloud native security policies via Terraform, and IaC scanning as part of all IaaS deployments.
• Participate in, and lead threat intelligence and forensic analysis exercises, to predict and prevent attacks.
• Work closely with application and infrastructure teams to automate the mitigation of vulnerabilities against all cloud hosted systems.
• Serve as the security subject matter expert (SME) for teams architecting and building in the cloud.
• Create and maintain thorough runbooks and incident response documentation for the Security Operations Center (SOC).
• Create and monitor correlated event dashboards in the SIEM, alerting against thresholds you develop.
• Research, implement, and configure security protections for email, hosts, and identities.
• Write scripts to automate manual tasks.
• Provide training and mentorship to junior staff and internal teams.
• Perform other duties that support the overall objective of the position.

Education Required:  

• Bachelor's Degree in Computer Science or related discipline.  
• Or, any combination of education and experience which would provide the required qualifications for the position.

Experience Required:

• 8+ years of experience in systems administration, software engineering, software development, or related experience.
• Experience with modern source control and ticketing tools such as Git, Jira, and Confluence.
• Software engineering background, is a thought leader in the application development space, and has experience in protecting against application and infrastructure security threats.

License/Certification Required:

• Amazon Web Services (AWS) Certified Solutions Architect / Developer / SysOps Administrator / DevOps Engineer (Professional).

Knowledge, Skills & Abilities:

• Knowledge of: Windows or Linux shell scripting and coding with a language like Python; infrastructure-as-code tooling like CloudFormation & Terraform; deploying and managing enterprise-scale applications in cloud services like AWS; Linux operating system; configuration management tools like Ansible, Puppet, Chef, and containerization technologies; building and testing software using Jenkins or similar continuous integration systems; relational and/or NoSQL databases like Microsoft SQL Server, PostgreSQL, and MongoDB; Microsoft Office Suite. 
• Skill in: Working as member of a team; communicating effectively; establishing and maintaining effective working relationships. 
• Ability to: Determine how a system should work and how changes in conditions, operations, and the environment will affect outcomes; work in a fast-paced environment; stay organized, prioritize workload, multi-task, and meet deadlines.

The company has reviewed this job description to ensure that essential functions and basic duties have been included. It is intended to provide guidelines for job expectations and the employee's ability to perform the position described. It is not intended to be construed as an exhaustive list of all functions, responsibilities, skills and abilities. Additional functions and requirements may be assigned by supervisors as deemed appropriate. This document does not represent a contract of employment, and the company reserves the right to change this job description and/or assign tasks for the employee to perform, as the company may deem appropriate.

NextGen Healthcare is an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all employees.