Senior Security Engineer
HybridPosted July 28, 2026
About the role
OnMed is a healthcare technology company delivering CareStations — a clinic-in-a-box that enables care wherever it is needed. The Senior Security Engineer will design, build, deploy, and operate security controls across OnMed’s cloud, applications, networks, and endpoints, with deep hands-on experience in Azure and Entra and a strong focus on HIPAA-compliant security in healthcare environments.
Responsibilities
Requirements (Must Have):
- Design, build, deploy, and manage security controls across OnMed’s cloud, application, and network environments.
- Harden Microsoft Azure and M365/Entra environments: identity, network security groups, firewall rules, encryption at rest and in transit.
- Operate and tune XDR/MDR, SIEM, and SOC workflows; develop detections and triage alerts; hands-on investigation.
- Lead end-to-end incident response: triage, containment, eradication, root cause analysis, and documentation.
- Design and maintain network and firewall architecture: segmentation, VPN, and Zero Trust for remote workforce and field devices.
- Review code and system designs for security gaps; collaborate with engineering on remediation.
- Automate security operations with scripting (PowerShell, Python, KQL) to strengthen detection, response, and hardening.
- Administer identity and access in Entra ID; quarterly access reviews; MFA/SSO enforcement.
- Maintain control evidence for SOC 2, HITRUST, FedRAMP, HIPAA, and related frameworks; support auditors.
- Coordinate with managed security providers as needed; retain ownership of security outcomes.
- 7+ years of hands-on informat
Track similar jobs
Get email alerts when new roles like this are posted.
Based on: Senior Security Engineer
See how this role matches your resume
Sign in to get an AI match score and personalized feed.