Lead Security Engineer | AirStrip

NantHealth•Dallas, TX

10d•Remote

About The Position

AirStrip is seeking a Senior Security Engineer to design, implement, and continuously strengthen enterprise security architecture across cloud, application, and network environments. This role serves as a hands-on technical leader, partnering closely with engineering teams to embed security best practices, proactively hunt threats, and respond to incidents. The ideal candidate brings deep expertise in cloud security, threat detection, incident response, and healthcare compliance frameworks, and is passionate about protecting critical systems in a fast-paced, mission-driven environment. Remote work may be allowed with approval. This role may require travel of up to 25%.

Requirements

Bachelor’s degree in Computer Science, Management Information Systems, Cyber Security, Engineering, or a related field preferred (commensurate experience will be considered in lieu of a degree)
Minimum 8 years of experience in IT (information technology)
Minimum 5 years of experience in cyber security / IT security
Knowledge of securing AWS, Azure, or similar cloud environments
Excellent documentation practices
Perform vulnerability management, coordinating with other teams to resolve findings
Knowledge of compliance frameworks: ISO 27001, NIST, HIPAA, HITRUST
Understanding of ITIL, Zero Trust, HITRUST, and ISO 27000 series frameworks
Experience researching, building, and implementing defensive security systems that are used against internal and external attack vectors
Experience designing and building out application and network security monitoring to aid in detection or forensic investigations
Background in intrusion detection, security investigations, and incident response
Deep understanding of the MITRE ATT&CK Framework and associated threat actor techniques
Experience “threat hunting,” i.e. using threat intel to proactively and iteratively investigate potential risks and finding suspicious behavior in the environment
Experience investigating data for anomalies in order to identify suspicious behavior
Experience with Identity and Access Management (IAM), provisioning user accounts and access
Solid understanding of SIEM tools (LogRhythm, Splunk, etc.)

Nice To Haves

IT certifications a plus: CISSP, CISA, CompTIA, GIAC

Responsibilities

Design and implement robust security architectures
Act as a mentor and escalation point to other members of the team
Iterate security posture to better protect against attacks and detect new vectors
Participate in efforts to mitigate and investigate security incidents
Evaluate and test new vendor and in-house network initiatives for security issues
Evangelize security practices through cross-functional work with engineering teams throughout the enterprise
Safeguard the enterprise through active operation and defense of critical infrastructure
Other duties as assigned