Staff Engineer, Security

NextGen Federal Systems•Remote GA, GA

About The Position

NextGen Healthcare is seeking an experienced Staff Security Engineer to join its Security Engineering team and improve the company’s security posture. The role applies a software engineering background and security experience to protect applications and infrastructure, while using automation, AI, and emerging technologies to improve security operations. The position works with security, DevSecOps, application, and infrastructure teams to build security tooling and standards, detect and mitigate risks, respond to incidents, and turn security findings into actionable guidance. The job description notes that duties may be expanded or changed by supervisors and that the description is not an exhaustive list of responsibilities.

Requirements

Bachelor’s degree in Computer Science or a related discipline, or a combination of education and experience that provides the required qualifications.
At least 6 years of experience in systems engineering, software engineering, security, or related work.
Experience with modern source control and ticketing tools such as Git, Jira, and Confluence.
Knowledge of Windows or Linux shell scripting and coding in a language such as Python.
Knowledge of infrastructure-as-code tools such as CloudFormation and Terraform.
Knowledge of deploying and managing enterprise-scale applications in cloud services such as AWS.
Knowledge of the Linux operating system.
Knowledge of configuration management tools such as Ansible, Puppet, and Chef, and containerization technologies.
Knowledge of building and testing software using Jenkins or similar continuous integration systems.
Knowledge of relational and/or NoSQL databases such as Microsoft SQL Server, PostgreSQL, and MongoDB.
Knowledge of Microsoft Office Suite.
Knowledge of AI-assisted development and security tools such as Claude Code; MCP and its security implications; CNAPP platforms; SIEM platforms and log correlation; and emerging AI-driven threats and defenses.
Skill in working as a team member, communicating effectively, and establishing and maintaining effective working relationships.
Ability to determine how systems should work and how changes in conditions, operations, and the environment affect outcomes.
Ability to work in a fast-paced environment, stay organized, prioritize workload, multitask, and meet deadlines.

Nice To Haves

Certifications in Amazon Web Services (AWS), Google Cloud Platform (GCP), OCSP, CEH, or similar.

Responsibilities

Develop and maintain security tooling, guidelines, and standards for the Security Engineering team.
Collaborate with DevSecOps teams to author cloud-native security policies using Terraform and implement infrastructure-as-code scanning for IaaS deployments.
Participate in threat intelligence and forensic analysis exercises to predict and prevent attacks.
Work with application and infrastructure teams to automate vulnerability mitigation across cloud-hosted systems.
Create and maintain runbooks and incident-response documentation for the Security Operations Center (SOC).
Create and monitor correlated event dashboards in the SIEM, including developing alert thresholds.
Use AI-enabled IDEs to accelerate security reviews of infrastructure-as-code, pull requests, and architecture designs, and validate AI-generated findings and recommendations.
Use a CNAPP to identify and prioritize misconfigurations, vulnerabilities, excessive permissions, and exposure across cloud workloads, containers, and pipelines, and integrate findings with the SIEM.
Research AI-driven threats, including AI-enabled phishing and social engineering, prompt injection, data leakage, and misuse of AI agents and tools; translate these threats into detections, controls, and guidance for engineering teams.
Securely connect AI tools to the CNAPP, SIEM, and other security data sources using MCP, including assessing MCP server security risks, tool permissions, and data access.
Use AI tools to correlate CNAPP and SIEM data and provide contextual reporting on platform risk posture, turning findings into prioritized, actionable insights for engineering teams and leadership.
Research, implement, and configure security protections for email, hosts, and identities.
Write scripts to automate manual tasks.