jobapplier

Security Operations Engineer

K Health

Skills

Required

  • Security Operations / IT Security / System Administration
  • SOC2 / HIPAA
  • modern cloud/hybrid
  • maintaining controls
  • endpoint administration
  • macOS / Windows
  • identity management
  • network security
  • Python
  • PowerShell
  • Bash
  • Slack

Preferred

  • threat detection
  • HIPAA security
  • SecOps workflows
  • cloud infrastructure
  • streamline security alerts

Join K Health as a Security Operations Engineer, where you will play a crucial role in securing our healthcare technology ecosystem. In this hands-on role, you will design, implement, and maintain security workflows, threat detection, and incident response procedures. You will also administer key security and endpoint management tools, maintain compliance with SOC2 and HIPAA security controls, and partner with cross-functional teams to enhance system security. Enjoy a hybrid work schedule, comprehensive benefits, and the opportunity to make a significant impact in the healthcare industry.

Responsibilities

  • Design, implement, and maintain hands-on SecOps workflows, threat detection, and incident response procedures across corporate and cloud infrastructure.
  • Build low-code and custom automations to streamline security alerts, routine IT security tasks, and incident triage.
  • Maintain and support continuous compliance with SOC2 and HIPAA security controls, actively participating in audit preparation, evidence gathering, and control enforcement.

Requirements

  • Incident Response: Proven background in actively detecting, investigating, and remediating security incidents in a modern cloud/hybrid environment
  • Experience: 3–5 years of dedicated hands-on experience in Security Operations, IT Security, or System Administration with a strong security focus
  • Compliance Standards: Demonstrated experience maintaining controls for SOC2 and/or HIPAA frameworks in an operational setting
  • Technical Depth: Deep foundational IT background spanning endpoint administration (macOS/Windows), identity management, and network security
  • Automation Mindset: Hands-on experience automating security operations or IT tasks using SOAR platforms, scripting (Python, PowerShell, Bash), or API integrations
  • If you thrive in a fast-paced environment where you are empowered to own your domain, automate repetitive tasks, and directly safeguard patient and organizational data, this role is for you
  • Direct experience implementing SOC2 or HIPAA controls from scratch or directly interfacing with external auditors
  • Hands-on familiarity with our specific technology stack: Sumo Logic, Jamf, Intune, Slack Enterprise, CrowdStrike, and Torq

Preferred

  • Relevant industry certifications (e.g., Security+, Network+, GIAC, or vendor-specific platform certifications)

Pay

USD 125,000 - 150,000