Staff Engineer, Security

Job Description:

The Staff Security Engineer will leverage automation, including nascent technologies, to increase efficiency in security operations. The ideal candidate is one who has a software engineering background with experience in protecting against application and infrastructure security threats.

• Develop and maintain security tooling, guidelines, and standards for the Security Engineering team.
• Collaborate with DevSecOps teams in authoring cloud native security policies via Terraform, and IaC scanning as part of all IaaS deployments.
• Participate in threat intelligence and forensic analysis exercises, to predict and prevent attacks.
• Work closely with application and infrastructure teams to automate the mitigation of vulnerabilities against all cloud hosted systems.
• Create and maintain thorough runbooks and incident response documentation for the Security Operations Center (SOC).
• Create and monitor correlated event dashboards in the SIEM, alerting against thresholds you develop.
• Research, implement, and configure security protections for email, hosts, and identities.
• Write scripts to automate manual tasks.
• Perform other duties that support the overall objective of the position.

Education Required:    

• Bachelor's Degree in Computer Science or related discipline.
• Or, any combination of education and experience which would provide the required qualifications for the position.

Experience Required:

• 6+ years of experience in systems administration, software engineering, software development, or related experience.
• Experience with modern source control and ticketing tools such as Git, Jira, and Confluence.
• Experience in protecting against application and infrastructure security threats.

License/Certification Required:

• Amazon Web Services (AWS) Certified Solutions Architect / Developer / SysOps Administrator.

Knowledge, Skills & Abilities:

• Knowledge of: Windows or Linux shell scripting and coding with a language like Python; infrastructure-as-code tooling like CloudFormation & Terraform; deploying and managing enterprise-scale applications in cloud services like AWS; Linux operating system; configuration management tools like Ansible, Puppet, Chef, and containerization technologies; building and testing software using Jenkins or similar continuous integration systems; relational and/or NoSQL databases like Microsoft SQL Server, PostgreSQL, and MongoDB; Microsoft Office Suite. 
• Skill in: Working as member of a team; communicating effectively; establishing and maintaining effective working relationships. 
• Ability to: Determine how a system should work and how changes in conditions, operations, and the environment will affect outcomes; work in a fast-paced environment; stay organized, prioritize workload, multi-task, and meet deadlines.

The company has reviewed this job description to ensure that essential functions and basic duties have been included. It is intended to provide guidelines for job expectations and the employee's ability to perform the position described. It is not intended to be construed as an exhaustive list of all functions, responsibilities, skills and abilities. Additional functions and requirements may be assigned by supervisors as deemed appropriate. This document does not represent a contract of employment, and the company reserves the right to change this job description and/or assign tasks for the employee to perform, as the company may deem appropriate.

NextGen Healthcare is an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all employees.