Senior Cyber Security Engineer

RLDatix•Remote,

6d•Remote

About The Position

RLDatix is seeking a Senior Cyber Security Engineer to own and mature the day-to-day security posture of its cloud-based SaaS solutions in healthcare and the Microsoft 365 environment that supports them. This hands-on engineering and advisory role covers vulnerability management, incident response, cloud and endpoint hardening, and compliance evidence supporting HITRUST CSF certification and HIPAA obligations. The role works across Azure, Microsoft 365, and SaaS environments, coordinating with Engineering, DevOps, Privacy, and Infrastructure teams. It also supports customer security reviews, audits, governance documentation, and risk management programs. The position may be performed remotely within the United States, with occasional travel as business needs require.

Requirements

At least 5 years of experience in cybersecurity engineering, security operations, security consulting, or a related information security role.
Demonstrated success leading vulnerability management programs, security remediation efforts, and incident response investigations from triage through resolution.
In-depth knowledge of cybersecurity frameworks and regulatory requirements, including HITRUST, HIPAA, NIST CSF, NIST 800-53, ISO 27001, SOC 2, or similar standards.
Ability to work remotely within the United States and travel occasionally as business needs require.
Interest in protecting healthcare data, advancing security best practices, and supporting patient safety through technology.
Ability to collaborate across technical and business teams in a fast-paced, highly regulated healthcare technology environment.

Nice To Haves

Experience securing Microsoft Azure and Microsoft 365 environments, including Entra ID, Defender, Sentinel, Intune, Purview, and Conditional Access.
Experience developing automation and operational efficiencies using PowerShell and/or Python.
Experience maintaining or preparing for HITRUST certification assessments.
Experience completing customer security assessments, including SIG, CAIQ, HECVAT, and healthcare-specific security questionnaires.
CISSP preferred; Security+, CCSP, CISA, HITRUST CCSFP, Azure Security Engineer, or similar certifications are a plus.

Responsibilities

Lead vulnerability management across Azure, Microsoft 365, and SaaS environments, identifying risks, prioritizing remediation, and reducing organizational exposure.
Monitor and strengthen cloud, endpoint, identity, and data protection controls to defend proactively against cyber threats.
Coordinate incident response investigations involving ransomware, phishing, account compromise, and business email compromise.
Partner with Engineering, DevOps, Privacy, and Infrastructure teams to implement secure configurations, logging, monitoring, and compliance-focused controls.
Manage HITRUST-, HIPAA-, and NIST-aligned security initiatives.
Support customer security reviews, audit activities, governance documentation, and risk management programs.