Security Engineer

The Ideal Porter Team Member

The ideal member of Porter will be a change agent, altering the status quo of healthcare delivery. You and your fellow Porter team members will provide an innovative and empathetic ecosystem of transparency to our customers. New Team Members will join feeling energetic and excited to revolutionize the healthcare continuum and contribute to the success of our mission-driven organization. Now is the time to seize the moment for consumer-centered digital health experiences and join our team.

Your Impact at Porter

In this position, you will provide technical expertise in securing the development and deployment of SaaS and Cloud platforms and applications. Job responsibilities include, but are not limited to:

·       Detect, investigate, and respond to security incidents across all systems and networks

·       Implement and maintain security scanning and monitoring systems to ensure compliance with all government and industry standards.

·       Work with DevOps and SRE teams to implement security into the CI/CD pipelines.

·       Enhance detection and response capabilities while creating efficient integrations between internal tools.

·       Write and refine playbooks, run books, alerts, and documentation.

·       Define and establish security guidelines, best practices, monitoring and alerting standards. 

·       Coordinate with vendors to perform penetration testing and vulnerability assessments.

·       Develop Security Dashboard and Quarterly Security reports.

What You’ll Need to Make Your Impact

·       Four or more years of Security Operations or Incident Response experience.

·       Two or more years of production experience working with AWS and Office 365.

·       Two or more years of experience implementing SIEM systems.

·       Two or more years of experience implementing endpoint security tools.

·       Experience implementing Identity and Access Management systems with Role Based Access controls. 

·       Hands-on experience developing build scripts that automate code quality scans, security scans, and dependency management leveraging DevSecOps tools.

·       Experience in implementing security and privacy controls compliant with SOC 2 Type 2, HIPAA, and HITRUST a plus.