Cybersecurity Engineer

DrFirst Inc.•,

28d•$65,000 - $80,000•Remote

About The Position

DrFirst is seeking a Cybersecurity Engineer to join its growing 5-person security team. This role is for an engineer who understands systems deeply, can identify issues, and build automation to resolve them faster. The engineer will triage alerts, conduct security risk assessments, contribute to DevSecOps, and collect audit evidence, all with a strong understanding of the underlying platforms. A key aspect of the role involves leveraging AI, like Claude, not just to complete tasks faster, but to fundamentally rethink and potentially eliminate existing workflows. The ideal candidate will have a proven track record of using AI for automation and system improvement. The security team operates efficiently, covering responsibilities typically handled by larger teams, by focusing on smart work and automation.

Requirements

2–3 years in a cybersecurity engineering or security operations role.
Familiarity with SOC 2, HITRUST, or NIST 800-53; HIPAA/PHI audits.
Experience completing customer security questionnaires or security risk assessments.
Scripting or automation experience (Python, PowerShell, or Bash) applied to real operational problems.
Experience committing code to GitLab and building applications.
Exposure to DevSecOps practices (pipeline security, secure SDLC, or security tooling integration).
AI fluency: writing effective prompts, applying critical thinking to AI output, and catching errors.
Engineering mindset for AI: continuously looking for opportunities to use AI to automate work.
Understanding of AWS and GCP platforms beyond security modules (architecture, product development, deployment, data flow, security guardrails).
Knowledge of AWS services: IAM, VPC, Security Hub, GuardDuty, CloudTrail, S3, EC2, Lambda, RDS.
Knowledge of GCP services: IAM, VPC Service Controls, Security Command Center, Cloud Logging, GKE, Cloud Run.
Understanding of SaaS product delivery: CI/CD pipelines, containerization, secrets management, access controls.
Familiarity with security tooling: SentinelOne, Proofpoint, KnowBe4, Jamf, AWN, KACE, Zscaler (ZIA/ZPA), Okta, Tenable, Splunk.
Objective-first thinking: assessing if an assignment is the right one and not missing the bigger picture.
Proactive in addressing blockers and dependencies.
Understanding of the technology stack and ability to identify misconfigurations.
Ownership and initiative: assessing needs and executing without constant direction.
Prioritizing automation over manual processes.
Committing work to GitLab and keeping Jira tickets updated.
Communicating progress through visible output in scrums.

Responsibilities

Triage alerts across various security tools including SentinelOne, Proofpoint, Splunk, AWS Security Hub, GCP SCC, Tenable, and Zscaler.
Manage the security inbox, complete customer questionnaires, and conduct Security Risk Assessments (SRAs).
Handle compliance tasks related to onboarding/offboarding, and manage endpoint and allowlist controls.
Contribute to DevSecOps initiatives, including pipeline security, secure SDLC, and security tooling integration.
Participate in security incident response and proactive threat prevention.
Conduct security reviews for new product features.
Collect audit evidence for SOC 2 / HITRUST, identifying and flagging misconfigurations.
Automate audit evidence collection using AI tools like Claude Code.
Drive AI-assisted implementation of data governance and retention policies.
Contribute to the security architecture, guardrails, and governance of corporate AI environments.

Benefits

Competitive compensation with a base salary of $65,000 - $80,000.
Company Performance-based Bonus Program.
Medical, dental, and vision insurance.
401K eligible after 3 months of employment, with 50% company match up to first 5% of salary contributed to the plan with a 3-year vesting schedule.
HSA for eligible employees enrolled in the HDHP, with a generous company contribution up to $500 for individual coverage and $1000 for family coverage per year.
100% company-paid short and long-term disability, AD&D, and group life insurance.
Accrued annual paid time off (PTO) of 18 days for the first 3 years of service, increasing thereafter.
7 paid holiday days.
Employee Assistance Program.
Continuing Education funds up to $1500 annually for eligible programs after 1 year of service.
Voluntary benefits including FSA, Hospital indemnity, Accident and Critical Illness insurances.