Information Security Engineer- Hybrid- Nashville TN

Lucent Health Solutions LLC•Nashville, TN

1d•Hybrid

About The Position

We are seeking a hands-on Information Security Engineer to design, implement, and operate enterprise security controls across on-premises and cloud environments. This role is responsible for protecting endpoints, identities, networks, and data while supporting regulatory compliance and audit readiness. The ideal candidate brings strong operational experience with modern security tools and can balance day-to-day security operations with continuous improvement of the security program.

Requirements

3–7 years of experience in information security, security engineering, or security operations
EDR (CrowdStrike preferred)
Email security platforms (Proofpoint preferred)
SIEM platforms (Sumo Logic or similar)
Strong understanding of network security and firewall technologies
Experience with Microsoft security stack (Entra ID, Defender, Conditional Access, MFA)
Experience securing Azure and/or AWS environments
Solid understanding of security principles: Identity & access management, Network segmentation, Threat detection and response, Logging and monitoring

Nice To Haves

Experience supporting SOC 2, HIPAA, HITRUST, or ISO 27001 audits
Experience working with MDR/MSSP providers
Familiarity with vulnerability management and remediation processes
Relevant certifications (one or more preferred): CISSP, CCSP, Security+, AZ-500, AWS Security

Responsibilities

Design, implement, and maintain security controls across endpoint, email, network, and cloud environments
Administer and optimize EDR/XDR platforms (e.g., CrowdStrike) for threat detection and response
Manage and tune email security platforms (e.g., Proofpoint) including phishing protection and DLP controls
Operate, monitor, and continuously improve SIEM (e.g., Sumo Logic) for detection, alerting, and log analysis
Configure and manage enterprise firewall technologies (e.g., Cisco, Fortinet, Meraki)
Support incident detection, investigation, and response activities in coordination with internal and MSSP partners
Administer Microsoft security stack including Entra ID, M365 Defender, Conditional Access, and MFA
Implement and enforce least-privilege access and identity protection controls
Monitor identity-related threats and support response actions
Secure Azure and/or AWS environments across IaaS, PaaS, and SaaS services
Implement baseline configurations and cloud security controls aligned to best practices
Monitor cloud workloads and integrate logs into SIEM for centralized visibility
Support secure architecture design, including identity, network segmentation, and data protection
Support regulatory frameworks including SOC 2, HIPAA, ISO 27001, and HITRUST
Assist with internal and external audits, including evidence collection and remediation tracking
Maintain and improve security policies, standards, and procedures
Partner with cross-functional teams to ensure control effectiveness and audit readiness