Senior Security Engineer - Fuze Health

Job Summary At Fuze Health, we put patients first and tirelessly address the most pressing needs in healthcare. We empower millions to digitally connect with care providers, essential health resources and needed treatments – and enable care providers, employers, health plans and life sciences companies to meaningfully enhance quality, outcomes and value. We are dedicated to helping our partners evolve and modernize to meet emerging patient and marketplace needs. Fuze Health’s foundation is built upon the strategic combination of several proven, technology-powered innovators in the digital health, diagnostics, and pharmacy sectors. Our growing portfolio brings together the capabilities of industry leaders including LetsGetChecked, Truepill, and Alto Pharmacy, to create a distinctive, unified force in healthcare. Together, we have the shared vision, advanced capabilities and talented teams to deliver next-generation solutions that patients and healthcare partners need today and into the future. Job Description As the Senior Security Engineer you will: Work closely with many teams across the organization to help align and promote strong security controls and mitigations as well as through architectural reviews. Review system design and implementations from multiple teams to assess security posture and make recommendations to architecture from threat modeling Utilizing scripts and other useful internal tools to help ensure full coverage of the security agent suite across the enterprise on a variety of platforms. Develop automation using Python and other programs to help integrate various systems. Write documentation including policies and procedures Oversee the regular execution of vulnerability scanning activities across various environments (e.g., network, containers, cloud). Design and implement infrastructure security controls for servers, cloud environments, and container platforms. Contribute to compliance initiatives (e.g., HiTrust, ISO 27001) from a security perspective. Help contribute to our external-facing requirements including supporting customer and vendor audits. Participate in the on-call roster, including hours outside of normal business Key ResponsibilitiesWhat you’ll work on & what we’re looking for: As a security engineer you’ll become part of a team that manages a suite of tools in the following areas: Endpoint Protection Mobile Device Security Vulnerability Management Network Protection Transmission Protection Password Management Access Control Education, Training and Awareness You’ll need a good understanding of computing / networking / cloud computing Problem solving, curiosity, and willingness to learn are key traits Be able to demonstrate a working knowledge of the above areas Required Experience & Qualifications What you need: 4+ years of experience in security engineering, with a strong focus on infrastructure, application and cloud security Hands-on experience securing Kubernetes (K8s) and container platforms in production environments Proficiency in scripting/automation (Python, Bash, Terraform or similar) Comfortable working in a fast-paced environment with excellent communication skills Capable of working independently and as part of a team environment Proven work experience in an Engineering discipline Experience in building and maintaining security systems in a Cloud and on-premises environment Hands-on experience in security systems, including firewalls, intrusion detection systems, anti-virus software, authentication systems, log management, content filtering, etc. Experience with network security and networking technologies and with system, security, and network monitoring tools Good understanding of the latest security principles, techniques, and protocols and best practices (CIS benchmarks, NIST, OWASP, etc.) Familiarity with web related technologies (Web applications, Web Services, APIs) and of network/web related protocols Problem solving skills and ability to work under pressure Travel within the US may be required on an irregular basis (minimal travel) BS degree in Computer Science or related field Relevant certifications (e.g., CISSP, CCSP, GIAC, OSCP) Additional Information Additional Physical Job RequirementsPhysical requirements for this role include the ability to work at a computer terminal with monitor, keyboard and mouse for extended periods of time, stoop, bend, and reach for equipment and supplies, make frequent repetitive motions required to operate a computer that include the wrists, hands and fingers, and lift, carry, push, pull, and move light objects up to 20 pounds. The role also requires the ability to effectively communicate through verbal interactions, discern auditory information, and visually perceive details to perform essential job functions. Consistent with the Americans with Disabilities Act (ADA) and similar applicable state laws, it is Fuze Health’s policy to provide reasonable accommodation to enable qualified individuals with disa