Security Engineer

Why join Nextech?

We are a leader in specialty healthcare technology solutions, headquartered in Tampa, FL.

We are an ever-growing team, guided by our iCREATE values of Integrity, Collaboration, Respect, Empowerment, Accountability, Trust, and Excellence. We hold these values in high regard and are driven to succeed in all we do.

We’re committed to hiring and retaining talent, which is why we invest in our employees through competitive pay, a generous bonus structure, great healthcare, a comprehensive wellness program, and many other benefits.

If you are a software engineer, finance or accounting professional, customer support specialist, or a business development expert with a passion for healthcare technology (just to name a few), we want to hear from you.

We are an equal opportunity employer with a commitment to diversity.  All individuals, regardless of personal characteristics are encouraged to apply. If you are a candidate in need of assistance or an accommodation in the application process, please contact talent@nextech.com.

Job Summary

The Security Engineer will be a key contributor to our cybersecurity team. They will utilize CrowdStrike’s advanced endpoint detection and response (EDR) tools to protect our organization from emerging threats. They will focus on monitoring and analyzing security data to identify potential issues and handle security incidents swiftly. The ideal candidate will have a strong grasp of cybersecurity principles and practical experience in managing security challenges, and will play a crucial role in enhancing our threat detection capabilities. 

All activities must be in compliance with Equal Employment Opportunity laws, HIPAA, ERISA and other regulations, as appropriate. 

In addition to working in accordance with appropriate conduct and behavioral standards, specific responsibilities of this role include: 

• Monitor Security Alerts: Continuously monitor and analyze security alerts and incidents using CrowdStrike and other security tools. 

• Incident Response: Investigate security incidents and breaches, determine their root cause, and work to mitigate and resolve them promptly. 

• Threat Hunting: Proactively search for signs of malicious activity across the network using CrowdStrike’s threat-hunting capabilities. 

• Vulnerability Management: Identify and assess vulnerabilities within the organization’s network, applications, and systems, and work with relevant teams to remediate them. 

• Security Reporting: Generate detailed reports on security incidents, threats, and vulnerabilities, providing actionable recommendations for improvements. 

• Collaboration: Work closely with other IT and security teams to develop and implement security strategies and protocols. 

• Security Awareness: Assist in developing and delivering security awareness training to employees, promoting best practices in cybersecurity. 

• Stay Informed: Keep up-to-date with the latest security trends, tools, and best practices to enhance the organization’s security posture. 

• Stay up to date with technical security controls, guidelines, and frameworks outlined by standards such as HIPAA, PCI, SOC2, ISO 27001/27013, NIST 800-53 

• Carry out additional responsibilities as assigned based on business need 

• Experience: 5+ years of experience in cybersecurity, with a strong focus on incident response and threat detection. 
• CrowdStrike Expertise: Hands-on experience with CrowdStrike EDR platform, including its threat hunting, incident response, and vulnerability management features. 
• Bachelor’s degree in Computer Science, Information Security, or a related field. Relevant certifications such as CISSP, CEH, or CrowdStrike Certified Falcon Administrator (CCFA) are a plus. 
• Experience with cloud security in platforms such as Azure, AWS. 
• Experience with security tools including CrowdStrike, Abnormal security, Tenable.io, or Zscaler. 
• Proficiency in security tools and technologies, including SIEM, firewalls, IDS/IPS, and vulnerability scanners. 
• Strong problem-solving skills and the ability to analyze complex data to identify security threats. 
• Excellent verbal and written communication skills, with the ability to clearly convey technical information to non-technical stakeholders. 
• Attention to Detail: A keen eye for detail and the ability to spot anomalies that may indicate security threats. 

• Certified Ethical Hacker (CEH) 
• CISSP 
• Experience with other EDR platforms, SIEM tools, or network security technologies. 
• Familiarity with scripting or programming languages (Python, PowerShell, etc.) for automation and threat detection tasks. 
• Previous experience working in a SOC (Security Operations Center) environment. 

• Generous annual bonus opportunity
• 401(k) with Employer Match
• Flexible Time Off: take time off when you need it without worrying about available hours
• 10 paid holidays + 1 floating holiday
• Volunteer Time Off
• Insurance: Choice of Medical, Dental, and Vision plans
• Health Savings Account with employer match
• Flexible Spending Account
• 100% Company-Paid Parental leave
• 100% Company-Paid Life Insurance and Short/Long Term Disability Insurance
• iCREATE Employee Recognition Program
• Wellness Program including discounts on medical premiums
• Employee Assistance Program with free counseling sessions available
• Corporate Discounts on Retail, Travel, and Entertainment
• Pet Insurance options