Information Security Engineer (IS Engr I) - REMOTE

Net Health•Pittsburgh, PA

6d•$65,920 - $82,400•Remote

About The Position

Net Health is a high-growth, profitable SaaS company in healthcare that helps caregivers harness data for human health. We offer a work-from-anywhere environment and unlimited PTO, with a welcoming and collaborative culture and progressive benefits. Our software and predictive analytics cover the continuum of care, from hospital-to-home, across various medical specialties. We are hiring an Information Security Engineer to help close out the engineering work on our security roadmap. This role will involve cloud security projects in Azure, driving vulnerability remediation, securing AI projects, and participating in an on-call rotation. The engineer will also apply a security lens to new projects through vendor reviews and risk assessments, and contribute to post-quantum cryptography readiness. The work is varied, including implementing controls in Azure, collaborating with dev teams on CVEs, reviewing MCP servers, assessing API partners, and running access reviews. We are looking for someone who is comfortable with AI as a practical security tool, understands AI agents and MCPs, and can govern agent access to enterprise data. The ideal candidate is responsive, independent, and self-directed, spotting and resolving security problems early.

Requirements

5+ years in security engineering or cloud security
Demonstrated experience running access reviews
Working knowledge of AI agents and MCP, including the access and data exposure risks they create
Hands-on with Claude, CrowdStrike, OX Security, Delinea, or comparable tooling
Track record of driving projects to completion with minimal oversight
Highly responsive, with clear stakeholder communication throughout a project
Able to participate in an on-call rotation
Microsoft Azure experience
CrowdStrike experience

Responsibilities

Own Azure cloud security projects, including control enablement
Represent security on the Cloud Architecture Review Board and Change Advisory Board
Help build our post-quantum cryptography readiness plan
Drive vulnerability remediation with dev teams through CrowdStrike and OX Security
Participate in the security on-call rotation, triaging through CrowdStrike Complete
Evaluate and secure AI tools, integrations, and agents before deployment
Review and approve MCP servers against our governance model
Support the AI Steering Committee on security requirements for AI initiatives
Complete vendor and employee software requests, approving or denying based on risk tolerance
Conduct architecture, product, and engineering design risk reviews early in the SDLC
Own quarterly all-user access reviews