Information Security Engineer (IS Engr I) - REMOTE

Net Health•Pittsburgh, PA

5d•Remote

About The Position

Net Health is a high-growth, profitable SaaS company in the healthcare industry, delivering solutions that help patients get better, faster, and live more fulfilling lives. We offer a work-from-anywhere environment, unlimited PTO, and a welcoming, collaborative culture with progressive benefits. We are seeking an Information Security Engineer to contribute to our security roadmap, focusing on cloud security projects in Azure, vulnerability remediation, securing AI projects, and ensuring post-quantum cryptography readiness. The role involves a variety of tasks, including implementing controls, reviewing systems, assessing partners, and conducting access reviews. We are looking for an independent, self-directed individual who can identify and resolve security issues proactively, with a strong understanding of AI as a practical security tool and its associated risks.

Requirements

5+ years in security engineering or cloud security.
Demonstrated experience running access reviews.
Working knowledge of AI agents and MCP, including the access and data exposure risks they create.
Hands-on with Claude, CrowdStrike, OX Security, Delinea, or comparable tooling.
Track record of driving projects to completion with minimal oversight.
Highly responsive, with clear stakeholder communication throughout a project.
Able to participate in an on-call rotation.
Required Software Experience: Microsoft Azure, CrowdStrike.

Responsibilities

Own Azure cloud security projects, including control enablement.
Represent security on the Cloud Architecture Review Board and Change Advisory Board.
Help build our post-quantum cryptography readiness plan.
Drive vulnerability remediation with dev teams through CrowdStrike and OX Security.
Participate in the security on-call rotation, triaging through CrowdStrike Complete.
Evaluate and secure AI tools, integrations, and agents before deployment.
Review and approve MCP servers against our governance model.
Support the AI Steering Committee on security requirements for AI initiatives.
Complete vendor and employee software requests, approving or denying based on risk tolerance.
Conduct architecture, product, and engineering design risk reviews early in the SDLC.
Own quarterly all-user access reviews.