Security Engineer
Healthmark Group· enterprise· Hospital & Health Care· Aug 8, 2026 · 3mo agoPosted 81 days ago
US
Hybrid
Full-time
Senior
$90K–$130K
3+ years exp
Before you apply
Ghost Signal:
Open 81 days.
Job description
POSITION: Cloud Security Engineer
L O CATION: Remote
Company Overview:
HealthMark Group is a leading provider of health IT solutions for healthcare providers across the country. By leveraging technology to reimagine the business of healthcare, HealthMark transforms administrative processes into seamless digital solutions. From HealthMark’s proprietary MedRelease platform for Release of Information, the company is pioneering an efficient, compliant, and patient-centric approach to support the entire spectrum of the patient information journey. HealthMark Group was founded in 2006 with corporate headquarters in Dallas, TX, and has been named to both the Dallas 100 and the Inc. 5000 for multiple years in a row as one of the fastest-growing companies in the region and the country.
We are a mid‑sized company in a transformation phase: modernizing legacy systems, building new products, and automating workflows that used to require rooms full of people. If you want to build things that matter (not just maintain them), this is a good time to join.
Department Overview:
HealthMark Group Security Operations is charged with protecting the confidentiality, integrity, and availability of information assets to support our mission, ensure compliance with applicable laws and regulations, and promote a culture of security awareness across the enterprise. We commit to safeguarding the data entrusted to us over the millions of patient information journeys our organization facilitates every year. We take a risk-based approach to protect sensitive data from unauthorized access, alteration, or destruction, and to maintain operational resilience in a world of ever-evolving threats.
Role Overview:
The cloud security engineer is responsible for implementing, operating, and maintaining security controls for HealthMark Group developed applications and corporate systems, with a focus on the AWS cloud environment. They apply and monitor AWS security guardrails appropriate for a highly-regulated environment containing Protected Health Information (PHI) and which must adhere to security regulations and frameworks such as HIPAA, HITRUST, and SOC 2. They work closely with senior security engineers, application development, and cloud operations teams to keep controls effective, evidence current, and findings remediated.
Primary Roles and Responsibilities :
• Implement and maintain security controls utilizing native AWS services, such as IAM, KMS, GuardDuty, Security Hub, and AWS Config, to safeguard PHI across all cloud environments.
• Apply and maintain baseline security configurations and guardrails across AWS accounts, ensuring new accounts and workloads conform to established PHI protection standards.
• Review Terraform or AWS CloudFormation templates for security misconfigurations and contribute secure-by-default modules and policy-as-code rules that enforce HIPAA, HITRUST, and SOC 2 controls before deployment.
• Implement and validate data-at-rest and data-in-transit encryption utilizing AWS KMS, ensuring PHI workloads meet established cryptographic standards.
• Implement least-privilege IAM policies and roles, perform periodic access reviews, and remediate excessive or unused permissions across AWS and Microsoft Entra.
• Integrate and maintain security testing, container scanning, and secrets management (AWS Secrets Manager) within CI/CD pipelines, supporting automated evidence-collection workflows for continuous SOC 2 and HITRUST audit readiness.
• Triage, investigate, and track remediation of vulnerabilities and findings from application and cloud security tooling, such as SAST, DAST, and CSPM, in partnership with application development and cloud operations teams.
• Monitor cloud security telemetry from AWS CloudTrail, Amazon CloudWatch, and the enterprise SIEM tool, and tune and maintain detection rules to improve alert fidelity.
• Respond to cloud security events and incidents in partnership with our Managed Detection and Response provider, Cloud Operations team, and Managed Services Provider. Perform initial investigation and containment, and escalate to senior engineers as appropriate.
• Collect and maintain control evidence for SOC 2, HITRUST, HIPAA, and PCI audits, and support responses to client security assessments and questionnaires.
• Document cloud security exceptions and compensating controls for review, partnering with senior engineers and GRC to track them to closure.
• Develop and maintain runbooks, configuration documentation, and operational procedures for cloud security controls.
• Produce recurring reports on cloud security metrics, including control coverage, posture drift, and vulnerability remediation status.
• Contribute cloud security expertise to enterprise security awareness and developer training efforts.
• Stay up to date with industry trends and advancements in attacks and remediations, sharing relevant findings and recommendations with the team.
• Provide other support to HealthMark Group Security Operations as required.
Required Experience and Qualifications:
• Minimum of 3 to 5 years of hands-on experience in cybersecurity, cloud engineering, or infrastructure engineering, with at least 2 years securing AWS environments.
• Hands-on knowledge of core AWS services commonly holding or routing PHI (VPC, IAM, EC2, S3, RDS, Lambda) and the native AWS security services used to protect them (GuardDuty, Security Hub, AWS Config, KMS).
• Hands-on experience securing and hardening Linux or Windows Server systems and cloud workloads, including access control, logging, patching, and benchmark-based configuration standards, with working familiarity in the other.
• Working knowledge of HIPAA regulations, HITRUST CSF requirements, SOC 2 trust services criteria, or similar frameworks, including experience mapping technical controls to their requirements.
• Experience with security monitoring, alert triage, and incident response, including investigation in AWS using CloudTrail, CloudWatch, and SIEM telemetry.
• Experience with vulnerability management and remediation tracking using scanning and cloud security posture management (CSPM) tools.
• Proficiency in scripting and automation using PowerShell, Python (Boto3), or similar to automate security and compliance tasks.
• Great communicator with the ability to relay critical information to engineering teams and Security Operations leadership promptly and effectively.
• Strong troubleshooting and analytic ability to track and solve problems across technical systems, such as servers, databases, developed applications, and network infrastructure.
• Bachelor’s degree in computer science, Information Security, or equivalent practical engineering experience.
Additional Preferred Experience:
• Experience deploying and managing AWS infrastructure via Terraform or AWS CloudFormation, including policy-as-code tools (e.g., Checkov, OPA) and security integration into CI/CD pipelines.
• AWS Certified Security – Specialty
• Certified Information Systems Security Professional (CISSP) or Associate of ISC2
• CompTIA Security+ or CySA+, or GIAC Cloud Security Essentials (GCLD)
• Experience with security and administration of Microsoft identity and productivity platforms, including M365, Entra, and Active Directory
• Experience with networking and security in physical and hybrid environments, in addition to cloud
Note: This j ob description is intended to provide a general overview of the position and does not encompass all job-related responsibilities and requirements. The responsibilities and qualifications may be subject to change as the needs of the organization evolve.
T h is role does or may require regular access to Protected Health Information (PHI) and/or confidential client data. The incumbent must demonstrate a strong understanding of confidentiality requirements, adhere to all HIPAA regulations and organizational privacy and security policies, and report any known or suspected unauthorized access, use, or disclosure of PHI immediately to the Privacy Officer or Information Security team. This position requires timely completion of all required company-sponsored and regulatory training programs
Application prep
Use the role’s language and application details while tailoring your materials.
Keywords to mirror
awsrestci/cdpython
- Platform
- adp-workforce-now
- Effort
- medium
Benefits
Benefits detected in the listing.
Pto