Security Engineer

Porter is hiring a Security Engineer to join the team!

Porter is a passionate group of individuals dedicated to providing unbridled transparency throughout the healthcare continuum by combining healthcare analytics with compassion and trust. Porter considers the whole person, their environment, and their preferences for a personalized health approach. This new era of health innovation offers the opportunity to lower costs, boost access and inclusivity, and revolutionize treatment experiences and outcomes for all consumers. Our consumer-centered ecosystem demystifies healthcare decisions for consumers and providers. Providers, recently discharged patients, or anyone searching for healthcare needs outside of the hospital can find a trusted route to independence through Porter.

Your Impact at Porter

In this position, you will provide technical expertise in securing the development, and deployment of SaaS and Cloud platforms, web and mobile applications. Job responsibilities include, but are not limited to:

• Detect, investigate, and respond to security incidents across all systems and networks.

• Coordinate the recovery and remediation efforts with internal and external stakeholders.

• Implement and maintain security scanning and monitoring systems to ensure compliance with all government and industry standards.

• Work with DevOps and SRE teams to implement security into the CI/CD pipelines.

• Enhance detection and response capabilities while creating efficient integrations between internal tools.

• Write scripts in Python or PowerShell to automate tasks and conduct incident responses.

• Write and refine playbooks, run books, alerts, and documentation.

• Define and establish security guidelines.

• Coordinate with vendors to perform penetration testing and vulnerability assessments.

• Develop Security Dashboard and Quarterly Security reports.

• Work with project managers to ensure business and development needs are met.

What You’ll Need

• Four or more years of Security Operations or Incident Response experience.

• Two or more years of production experience working with AWS.

• Two or more years of experience implementing SIEM systems.

• Two or more years of experience implementing endpoint security tools.

• Experience implementing Identity and Access Management systems with Role • Based Access Control. OAUTH experience preferred.

• Hands-on experience developing build scripts that automate code quality scans, security scans, and dependency management leveraging DevSecOps tools.

• Ability to script in Python, bash, or PowerShell.

• Experience in implementing security and privacy controls compliant with HIPAA/HITRUST a plus.

What We Offer

• Full Time Employment

• Competitive Wage

• Remote Work Environment

• Medical, dental, and vision benefits within 30 days of hire

• Paid holidays

• A fun team and special culture