Security Operations Engineer

The posting, as Deephealth wrote it

The Security Operations Engineer builds and operates security controls, tooling, and automation across DeepHealth's cloud and corporate environments. This role is responsible for configuring, integrating, and maintaining the enterprise security tooling stack, developing detection content, and automating security operations tasks so that controls are repeatable, version-controlled, and auditable.
Working within DeepHealth's established security frameworks and under the direction of the Director, Security Operations, this position operates and tunes security controls, detection content, and guardrails. Independent validation of those controls sits with the security operations watch function — a deliberate separation that keeps the control environment defensible under audit. Remediation follows system ownership across Cloud Operations, Platform, and Application Development; this role supplies technical guidance and implements fixes directly where the control is security-owned.
This position operates within a regulated healthcare environment across a global operating footprint, with obligations under HIPAA, ISO/IEC 27001, and SOC 2. The role reports to the Director, Security Operations, with future reporting to the Manager, Security Operations as that position is established.

• Build, configure, integrate, and tune the enterprise security tooling stack across cloud and corporate environments.
• Develop and maintain detection content, correlation rules, and response automation within the SIEM and SOAR platform.
• Onboard new log sources and telemetry feeds, validating ingestion completeness, parsing accuracy, and field normalization.
• Administer and tune endpoint detection and response tooling, including policy configuration, exclusion governance, and coverage validation.
• Integrate security tooling with adjacent platforms through APIs to reduce manual handling and improve data quality.
• Implement and maintain security configurations, guardrails, and baselines across Google Cloud Platform, Amazon Web Services, and Microsoft Azure.
• Build and maintain security automation and infrastructure-as-code using Terraform or an equivalent framework, so that controls are version-controlled, repeatable, and auditable.
• Implement policy-as-code and preventive guardrails using native cloud policy engines or an equivalent open policy framework.
• Support cloud security posture management across all cloud environments, including finding deduplication, theme mapping, and routing to owning teams.
• Harden cloud resources including compute, storage, database, container, and serverless services against established benchmarks.
• Configure and maintain Microsoft 365 and Entra ID security controls, including conditional access, identity protection, and Defender workloads in a hybrid directory environment.
• Implement and maintain least-privilege access models, roles, and policies across multiple cloud identity systems.
• Implement container and Kubernetes securit

[…]
ly. (Required)

• Available to support incident response activity outside standard business hours as required. (Required)
• Microsoft Office experience. (Required)
• Industry certification such as Security+, CompTIA CySA+, or a cloud provider security certification. (Preferred)
• Experience in healthcare, medical device, or another regulated industry, and working familiarity with HIPAA obligations. (Preferred)
• Experience working alongside or integrating with a managed security service provider. (Preferred)

Quality Standards

• Communicates, cooperates, and consistently functions professionally and harmoniously with all levels of supervision, co-workers, visitors, and vendors.
• Demonstrates initiative, personal awareness, professionalism and integrity, and exercises confidentiality in all areas of performance.
• Follows all local, regional and country laws concerning employment.
• Follows all DeepHealth policies and procedures.
• Follows data privacy, compliance, safety and confidentiality standards at all times.
• Practices universal safety precautions.
• Promotes good public relations on the phone and in person.
• Adapts and is willing to learn new tasks, methods, and systems.
• Reports to work regularly as scheduled; consistently punctual with respect to working hours, meal and rest breaks, and maintains satisfactory personal attendance in accordance with DeepHealth guidelines.
• Completes job responsibilities in a quality and timely manner.

Travel
This position requires domestic / international travel up to 10%.

Working Environment
Remote

Work Authorization / Visa Sponsorship: DeepHealth does not provide immigration sponsorship for this position, including sponsorship for employment-based visas or other work authorization requiring employer sponsorship. Candidates must be legally authorized to work in the United States without current or future sponsorship from DeepHealth for the duration of employment.

Salary

Dependent upon experience: 110,000-120,000 USD