OnMed is a healthcare technology company delivering CareStations — a clinic-in-a-box that enables care wherever it is needed. The Senior Security Engineer will design, build, deploy, and operate security controls across OnMed’s cloud, applications, networks, and endpoints, with deep hands-on experience in Azure and Entra and a strong focus on HIPAA-compliant security in healthcare environments.

Responsibilities

Requirements (Must Have):

Design, build, deploy, and manage security controls across OnMed’s cloud, application, and network environments.
Harden Microsoft Azure and M365/Entra environments: identity, network security groups, firewall rules, encryption at rest and in transit.
Operate and tune XDR/MDR, SIEM, and SOC workflows; develop detections and triage alerts; hands-on investigation.
Lead end-to-end incident response: triage, containment, eradication, root cause analysis, and documentation.
Design and maintain network and firewall architecture: segmentation, VPN, and Zero Trust for remote workforce and field devices.
Review code and system designs for security gaps; collaborate with engineering on remediation.
Automate security operations with scripting (PowerShell, Python, KQL) to strengthen detection, response, and hardening.
Administer identity and access in Entra ID; quarterly access reviews; MFA/SSO enforcement.
Maintain control evidence for SOC 2, HITRUST, FedRAMP, HIPAA, and related frameworks; support auditors.
Coordinate with managed security providers as needed; retain ownership of security outcomes.
7+ years of hands-on informat

About the role

OnMed is a healthcare technology company delivering CareStations — a clinic-in-a-box that enables care wherever it is needed. The Senior Security Engineer will design, build, deploy, and operate security controls across OnMed’s cloud, applications, networks, and endpoints, with deep hands-on experience in Azure and Entra and a strong focus on HIPAA-compliant security in healthcare environments.

Responsibilities

Requirements (Must Have):

Design, build, deploy, and manage security controls across OnMed’s cloud, application, and network environments.
Harden Microsoft Azure and M365/Entra environments: identity, network security groups, firewall rules, encryption at rest and in transit.
Operate and tune XDR/MDR, SIEM, and SOC workflows; develop detections and triage alerts; hands-on investigation.
Lead end-to-end incident response: triage, containment, eradication, root cause analysis, and documentation.
Design and maintain network and firewall architecture: segmentation, VPN, and Zero Trust for remote workforce and field devices.
Review code and system designs for security gaps; collaborate with engineering on remediation.
Automate security operations with scripting (PowerShell, Python, KQL) to strengthen detection, response, and hardening.
Administer identity and access in Entra ID; quarterly access reviews; MFA/SSO enforcement.
Maintain control evidence for SOC 2, HITRUST, FedRAMP, HIPAA, and related frameworks; support auditors.
Coordinate with managed security providers as needed; retain ownership of security outcomes.
7+ years of hands-on informat

Track similar jobs

Get email alerts when new roles like this are posted.

Based on: Senior Security Engineer

See how this role matches your resume

Sign in to get an AI match score and personalized feed.

Create account Sign in

More in Engineering

Cybersecurity Product Fintech SaaS Remote-first