Security Engineer

MD Integrations

6d•$125,000 - $155,000•Remote

About The Position

MD Integrations (MDI) is seeking a hands-on Security Engineer to help protect its cloud infrastructure, applications, endpoints, and users. The role focuses on security operations, vulnerability management, incident response, application security, and administration of security platforms. The Security Engineer owns security findings through prioritization, coordination, and validation, while the team responsible for the affected system implements remediation. The position works closely with Systems Operations, DevOps, Engineering, external security partners, executives, and customers. It reports directly to the Sr. Director, Systems Operations and is fully remote. Availability during and after core business hours may be required as business needs dictate.

Requirements

3–6 years of experience in Security Engineering, Security Operations, Cloud Security, or a closely related role.
Hands-on experience administering an endpoint detection and response (EDR) platform and working with a managed detection and response (MDR) provider.
Experience operating or tuning a SIEM, investigating security alerts, and onboarding new log sources.
Strong experience managing vulnerabilities from discovery through prioritization, remediation, validation, and closure.
Experience with SAST, DAST, software composition analysis, dependency scanning, secrets detection, and application security tooling.
Practical AWS security experience, including IAM, logging, networking, and cloud configuration review.
Experience supporting security investigations, incident containment, root cause analysis, and remediation coordination.
Proficiency with Python, Bash, APIs, or similar technologies for security automation, integrations, and reporting.
Ability to clearly communicate technical security risk and remediation requirements to Engineering, DevOps, Systems Operations, and other stakeholders.
Familiarity with SOC 2, ISO 27001, and HIPAA compliance requirements, with experience coordinating penetration tests, vulnerability rescans, or third-party security assessments.

Nice To Haves

Experience with Cloudflare, Zero Trust technologies, WAF, or similar edge security platforms.
Experience administering security awareness and phishing simulation platforms such as KnowBe4.
HITRUST experience.

Responsibilities

Monitor and investigate security alerts across CrowdStrike Falcon Complete, CrowdStrike Next-Gen SIEM, Cloudflare, AWS, and other security platforms.
Own CrowdStrike Falcon Complete operations, including policy management, escalation review, response coordination, containment validation, integrations, and coordination with the MDR provider.
Participate in incident response, including investigation, containment, root cause analysis, remediation coordination, and post-incident follow-up.
Execute approved containment actions such as endpoint isolation, credential or account remediation, indicator blocking, and access-control changes.
Own and tune SIEM alerts, detections, integrations, and workflows, and coordinate onboarding of additional log and telemetry sources with DevOps and Systems teams.
Manage the vulnerability lifecycle from identification through prioritization, SLA tracking, remediation coordination, rescanning, validation, and closure.
Manage findings from Dependabot, SAST, DAST, software composition analysis, secrets detection, penetration testing, cloud security reviews, and other sources in collaboration with Engineering.
Coordinate external penetration testing and rescans, and perform internal security assessments and validation where appropriate.
Manage CrowdStrike endpoint security operations, including policy management, alert investigation, endpoint security posture, and remediation coordination.
Review AWS security posture, IAM permissions, network security controls, and cloud configurations, and provide prescriptive remediation guidance.
Support Cloudflare Zero Trust and security policies, including access controls, web content filtering, suspicious activity investigation, and policy review.
Own and administer security platforms including CrowdStrike, KnowBe4, SIEM, SAST/DAST, and other security technologies.
Manage KnowBe4 phishing simulations, security awareness training, reporting, and follow-up activities.
Automate recurring security tasks, integrations, and reporting using Python, Bash, APIs, or similar technologies.
Implement, operate, and maintain technical security controls supporting SOC 2, ISO 27001, HIPAA, and other applicable compliance obligations.
Support technical control remediation, validation, and documentation for audits and internal reviews.
Evaluate new security technologies and provide recommendations based on security, operational, and business requirements.

Benefits

Competitive salary commensurate with experience and qualifications; budgeted range of $125,000–$155,000 DOE.
Health insurance subsidized at 75%.
Dental insurance.
Vision insurance.
Paid time off.
401(k) retirement savings plan with company match.
On-the-job training and professional development opportunities.
Flexible work arrangements in a fully remote team.
Direct engagement with customers and executives on high-impact initiatives.
Collaborative and supportive work environment.