Security Engineer

About the company

Imagine Pediatrics is a tech-enabled pediatric medical group that provides 24/7 virtual and in-home value-based care for children with special health care needs.

About this role

<div class="content-intro"><p><span style="font-family: verdana, geneva, sans-serif; font-size: 12pt;"><strong><span data-contrast="none">Who We Are</span></strong></span></p> <p><span style="font-family: verdana, geneva, sans-serif; font-size: 12pt;">Imagine Pediatrics is a tech enabled, pediatrician led medical group reimagining care for children with special health care needs. We deliver 24/7 virtual first and in home medical, behavioral, and social care, working alongside families, providers, and health plans to break down barriers to quality care. We do not replace existing care teams; we enhance them, providing an extra layer of support with compassion, creativity, and an unwavering commitment to children with medical complexity.</span></p></div><p><span style="font-family: verdana, geneva, sans-serif; font-size: 12pt;"><strong><span data-contrast="none">What You’ll Do</span></strong><span data-ccp-props="{"134233117":true,"134233118":true,"201341983":0,"335559739":160,"335559740":240}">&nbsp;</span></span></p> <p><span style="font-family: verdana, geneva, sans-serif; font-size: 12pt;"><span data-contrast="none">As a Security Engineer, you will help operate, tune, and improve the technologies and processes that protect Imagine Pediatrics’ systems, data, and patients from cyber security threats. You will work hands-on across our cloud, endpoint, identity, and application security tooling as part of a small, collaborative security team that values curiosity as much as credentials.</span> </span><span style="font-family: verdana, geneva, sans-serif; font-size: 12pt;" data-ccp-props="{"201341983":0,"335559739":0,"335559740":254}">&nbsp;</span></p> <p><span style="font-family: verdana, geneva, sans-serif; font-size: 12pt;"><span data-contrast="none">You will partner day to day with our Senior Security Engineer. This is a genuinely collaborative pairing rather than a hand-off of tickets: you will brainstorm together, whiteboard approaches, pressure-test each other’s thinking, and jointly own the outcome of what you build. We expect you to bring ideas and push back when something doesn’t look right.&nbsp;</span><span data-ccp-props="{"201341983":0,"335559739":0,"335559740":254}">&nbsp;</span></span></p> <p><span style="font-family: verdana, geneva, sans-serif; font-size: 12pt;"><span data-contrast="none"><strong>You will:</strong>&nbsp;</span><span data-ccp-props="{"201341983":0,"335559739":0,"335559740":254}">&nbsp;</span></span></p> <ul> <li><span style="font-family: verdana, geneva, sans-serif; font-size: 12pt;"><span data-contrast="none">Collaborate closely with the Senior Security Engineer to scope, design, and solution security initiatives, from early brainstorming through implementation and validation</span><span data-ccp-props="{"201341983":0,"335559739":0,"335559740":254}">&nbsp;</span></span></li> <li><span style="font-family: verdana, geneva, sans-serif; font-size: 12pt;"><span data-contrast="none">Participate in peer review of security configurations, policies, and automation, and contribute to shared documentation, runbooks, and design decisions</span><span data-ccp-props="{"201341983":0,"335559739":0,"335559740":254}">&nbsp;</span></span></li> <li><span style="font-family: verdana, geneva, sans-serif; font-size: 12pt;"><span data-contrast="none">Administer and tune core security platforms across endpoint detection and response, endpoint management and device compliance, email security, cloud access and network traffic monitoring, data loss prevention, and vulnerability management</span><span data-ccp-props="{"201341983":0,"335559739":0,"335559740":254}">&nbsp;</span></span></li> <li><span style="font-family: verdana, geneva, sans-serif; font-size: 12pt;"><span data-contrast="none">Support the security of our cloud infrastructure in Microsoft Azure/EntraID and Amazon Web Services (AWS), including identity and access management, logging and monitoring, network controls, encryption and key management, and configuration baselines</span><span data-ccp-props="{"201341983":0,"335559739":0,"335559740":254}">&nbsp;</span></span></li> <li><span style="font-family: verdana, geneva, sans-serif; font-size: 12pt;"><span data-contrast="none">Respond to alerts and escalations from our managed detection and response (MDR) provider and other security systems as part of the on-call rotation</span><span data-ccp-props="{"201341983":0,"335559739":0,"335559740":254}">&nbsp;</span></span></li> <li><span style="font-family: verdana, geneva, sans-serif; font-size: 12pt;"><span data-contrast="none">Interpret log outputs from a wide selection of IT, security, and cloud infrastructure, and help route the right telemetry into our centralized logging and SIEM solution</span><span data-ccp-props="{"201341983":0,"335559739":0,"335559740":254}">&nbsp;</span></span></li> <li><span style="font-family: verdana, geneva, sans-serif; font-size: 12pt;"><span data-contrast="none">Ensure configurations and deployments are aligned with relevant industry standards such as HITRUST, NIST, CIS Benchmarks, HIPAA, and the OWASP Top 10</span><span data-ccp-props="{"201341983":0,"335559739":0,"335559740":254}">&nbsp;</span></span></li> <li><span style="font-family: verdana, geneva, sans-serif; font-size: 12pt;"><span data-contrast="none">Translate framework requirements into practical technical controls, and apply them to new systems, cloud accounts, and services as the company grows rather than retrofitting them later</span><span data-ccp-props="{"201341983":0,"335559739":0,"335559740":254}">&nbsp;</span></span></li> <li><span style="font-family: verdana, geneva, sans-serif; font-size: 12pt;"><span data-contrast="none">Create, implement, and test incident response procedures for new threat content and alerts</span><span data-ccp-props="{"201341983":0,"335559739":0,"335559740":254}">&nbsp;</span></span></li> <li><span style="font-family: verdana, geneva, sans-serif; font-size: 12pt;"><span data-contrast="none">Respond to and