Cybersecurity Engineer II

Hanger, Inc.•,

3d•$110,400 - $138,000

About The Position

The Cybersecurity Engineer II assesses, secures, and integrates technology environments associated with mergers and acquisitions across Hanger’s national network of patient care clinics and business operations. The role spans the deal lifecycle, from pre-close due diligence through Day 1 stabilization and post-close integration, and includes hands-on security engineering, technical assessments, compromise assessment and threat hunting, remediation, and implementation of enterprise security controls in acquired environments. Working with Hanger’s corporate Security leadership team, the engineer translates technical findings into clear, business-focused risk reporting to inform deal decisions and integration priorities. The role helps bring protected health information (PHI) and critical clinical and business systems in acquired companies up to enterprise security and compliance standards. The position also supports compliance assessments, incident response, security tooling deployment, automation, development of M&A security standards and playbooks, and collaboration with corporate and acquired-company teams. Travel to acquired-company and clinic locations may be needed.

Requirements

At least 5 years of experience in cybersecurity, security engineering, cloud security, or a related field, including hands-on technical assessment and remediation work.
Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, or a related field, or equivalent work experience.
Hands-on experience securing Active Directory, Microsoft Entra ID, and cloud environments, including Azure and AWS.
Experience deploying and supporting enterprise security tooling such as endpoint detection and response, SIEM, email security, firewalls, IDS/IPS, vulnerability scanning, and identity governance platforms.
Experience identifying and remediating vulnerabilities and security misconfigurations.
Must have, or be eligible to obtain, a valid driver’s license and driving record within the standards outlined in Hanger’s Motor Vehicle Safety Policy and Procedures.
Ability to perform log analysis, incident investigation, and threat hunting using monitoring and detection tools.
Strong knowledge of identity and access management, endpoint security, cloud security, vulnerability management, network protocols, system hardening, and security architecture fundamentals.
Ability to use PowerShell, Python, or similar languages to automate security and identity workflows.
Working knowledge of the HIPAA Security Rule and security frameworks such as NIST CSF 2.0 and NIST SP 800-53.
Strong analytical problem-solving abilities and clear written and verbal communication, including translating technical findings for non-technical and executive audiences.
Sound judgment when handling confidential, time-sensitive deal information and a teamwork orientation.
Ability to travel to acquired-company and clinic locations as needed.

Nice To Haves

Experience supporting mergers, acquisitions, divestitures, or large-scale technology integrations.
Experience with compromise assessments, threat hunting, technical due diligence, or third-party security assessments.
Healthcare industry experience, including protecting PHI, securing electronic health record and practice management systems, managing connected medical device risk, and working with Business Associate Agreements.
Experience securing enterprise applications and cloud-hosted environments.
Experience consolidating identities, endpoints, and email tenants from acquired companies into an enterprise environment.
Experience with HIPAA, PCI DSS, ISO/IEC 27001, or SOC 2 control environments.
Project management skills and ability to manage multiple integration workstreams concurrently.
Security or cloud certifications such as CISSP, CCSP, GSEC, Security+, Microsoft SC-500, AWS Certified Security – Specialty, CCSK, or equivalent.
Incident response certifications such as GCIH, GCFA, or equivalent incident handling and forensics certifications.

Responsibilities

Support pre-close security due diligence by reviewing security documentation, questionnaire responses, incident and breach history, and external attack surfaces.
Perform technical security assessments across on-premises, cloud, and hybrid environments.
Conduct or coordinate compromise assessments and threat hunting in acquired environments before network interconnection.
Conduct vulnerability assessments, coordinate penetration testing, and drive remediation of security gaps and misconfigurations.
Review acquired-company application portfolios, including clinical and business systems, to identify critical systems, sensitive data and PHI locations, authentication methods, integrations, and security risks.
Inventory and assess acquired-company vendors, business associates, and sub-processors, identifying gaps in Business Associate Agreements and security-related contract terms.
Define and implement Day 1 security controls, including multifactor authentication, privileged access cleanup, endpoint protection, email security, and centralized logging.
Deploy, configure, and support enterprise security tooling and controls, including endpoint detection and response, SIEM, identity governance, email security, secure access, and backup platforms.
Harden cloud environments by securing identity, access controls, network exposure, logging, and configuration, and remediating identified weaknesses.
Design and validate secure interconnection and segmentation between acquired and enterprise networks, including clinical, corporate, and vendor zones.
Integrate acquired environments with enterprise security platforms, controls, and processes, including security monitoring, vulnerability management, incident response, and identity lifecycle management.
Monitor and analyze security events during integration; respond to and investigate incidents, performing initial containment, eradication, recovery, and documentation in coordination with Security Operations.
Use PowerShell, Python, or similar scripting to automate discovery, assessment, and onboarding tasks.
Document technical findings, remediation activities, and residual risks; prepare risk-rated findings, remediation plans with estimated effort and cost, and business-focused summaries for stakeholders.
Assess acquired environments against the HIPAA Security Rule and frameworks such as NIST CSF 2.0, NIST SP 800-53, and PCI DSS, and support audit and compliance activities.
Develop and maintain the M&A security playbook, including diligence questionnaires, assessment runbooks, Day 1 checklists, and integration standards; contribute to related security policies, standards, and procedures.
Collaborate with M&A, Legal, Compliance, Privacy, Security, Identity, Infrastructure, Networking, and acquired-company IT teams on secure integration.
Support security awareness and onboarding for acquired-company workforces.
Travel to acquired-company and clinic locations as needed.
Act with integrity, keep the patient at the center of work, foster collaboration, continuously innovate, and focus on superior outcomes.