Inovalon

Empowering data-driven healthcare for payers, providers, pharmacies, and life sciences organizations.

Staff Security Engineer – Level 6

Security EngineerSecurity EngineerFull TimeRemoteTeam 1,001-5,000H1B SponsorCompany SiteLinkedIn

Location

United States

Posted

4 days ago

Salary

$151.8K - $185K / year

Bachelor Degree10 yrs expEnglishAWSAzureCloudGoogle Cloud PlatformJava ScriptPythonService NowGo

Job Description

• Lead the strategic implementation of security standards in alignment with security policies. • Provide technical expertise and direction for the selection and implementation of a diverse suite of product security controls and countermeasures. • Provide technical leadership to recommend appropriate information security frameworks, requirements, direction, and system recommendations. • Stay abreast of security best practices and technologies, and foster the growth of team members by providing, training, guidance, and mentoring. • Design, develop, and maintain SOAR playbooks and automated response workflows to improve detection, triage, and containment across endpoint, network, identity, and cloud environments. • Integrate and optimize SIEM, EDR, vulnerability management, identity, and ticketing platforms (e.g., Rapid7, CrowdStrike, ServiceNow, Azure, email security) to enable end-to-end automated incident response. • Engineer and tune security detections, enrichment pipelines, and correlation logic to reduce false positives and improve MTTD/MTTR through automation and orchestration. • Develop and maintain automation scripts and APIs to support SOC operations, including automated containment (isolate host, disable account, block IP/domain), enrichment (threat intel, asset context), and reporting. • Build and maintain SOC automation use cases such as phishing response, suspicious login triage, malware containment, vulnerability prioritization, and insider-risk monitoring. • Collaborate with SOC analysts, threat hunters, and engineering teams to identify manual processes and convert them into automated workflows, increasing SOC efficiency and consistency. • Maintain and optimize SOAR platform health, integrations, and playbook performance, including version control, documentation, and continuous improvement lifecycle. • Create and deliver automation metrics and dashboards (automation coverage, time saved, incident response time reduction, false-positive reduction) for SOC leadership and executive reporting. • Work with leadership, customers, and stakeholders in both IT and Information Security to develop requirements based on a changing threat landscape and new digital capabilities. • Build security into product delivery pipeline (DevSecOps) using scripting. • Perform architecture reviews, identify security risks, recommend, and implement mitigations. • Research, recommend, and implement effective security controls for cloud-native services. • Discover and implement untapped functionality from security tools and services. • Work autonomously and proactively seek out opportunities to build security capabilities across our platforms. • Automate security throughout the development lifecycle (DevSecOps) by enabling security tools, technologies, and best practices for agile development. • Document security and compliance issues. • Present findings to clients, including technical teams and executive leadership, providing clear explanations of vulnerabilities, the potential impact on the business, and recommended mitigation strategies. • Adhere to all confidentiality, HIPAA, regulatory, and other such policies, procedures, and requirements as outlined within Employer’s Operating Policies and Procedures in all ways and at all times with respect to any aspect of the data handled or services rendered in the scope of work. • Maintain compliance with Inovalon’s policies, procedures and mission statement, and fulfill those responsibilities and/or duties that may be reasonably provided by Inovalon for the purpose of achieving operational and financial success.

Job Requirements

  • A minimum of years of experience in software and security engineering.
  • 5+ years of experience in one of these programming languages such as JavaScript, Python, Golang and PowerShell etc.
  • 5+ years’ experience in building security test automation utilities (security as a code) and environments.
  • 5+ years’ experience with cloud native technologies (Azure, AWS, GCP) and secure configurations.
  • 3+ years’ experience in security system administration (installation, configuration, upgrade, and support).
  • 3+ years of experience in application security architecture and risk assessments.
  • Experience with OWASP TOP 10, NIST CSF, and MITRE ATT&K frameworks.
  • One or more of the certifications: CISSP, CEH, OSCP.
  • Preferred: AWS Cloud certifications.
  • Cloud Security and Governance, Risk, and Compliance GRC, Thick Client Thin Client VAPT Knowledge/Hands on about DevSecOps/DevOps Knowledgeable about Data Protection.

Benefits

  • health insurance
  • life insurance
  • company-paid disability
  • 401k
  • 18+ days of paid time off

Related Categories

Related Job Pages

More Security Engineer Jobs

Product Security Engineer – Federal

Ping Identity

Identity Security for the Global Enterprise

Security Engineer4 days ago
Full TimeRemoteTeam 1,001-5,000Since 2002H1B No Sponsor

Product Security Engineer improving security posture for Ping’s identity platform

AWSCloudDockerGoogle Cloud PlatformJavaKubernetesGo
Texas
$133.1K - $175K / year
Full TimeRemoteTeam 1,001-5,000

The engineer will work closely with cross-functional teams to design secure products from the ground up, focusing on secure design reviews, threat modeling, vendor reviews, and secure code reviews for new features. Responsibilities also include identifying top product risks, leading risk-reduction initiatives, improving processes with AI tooling, creating monitoring solutions, and participating in on-call rotations.

BlockchainEVMThreat ModelingSecure Design ReviewCode ReviewSmart Contract SecurityCryptographyPenetration TestingVulnerability AssessmentRisk AnalysisPythonSolidityAI Tooling
United States
$152K - $179K / year

Information Security

DeepJudge

The Only AI Platform that Knows Everything Your Firm Knows

Security Engineer4 days ago
Full TimeRemoteTeam 51-200

Security Operations Manager at DeepJudge responsible for ISMS and compliance

United States
$150K - $200K / year
Full TimeRemoteTeam 10,001+Since 1961H1B Sponsor

Become a part of our caring community and help us put health first. The Senior Engineer, Offensive Security, executes high-fidelity threat actor and control validation campaigns within our BAS program. This role influences functional area strategy through technical expertise, ope...

United States + 1 moreAll locations: United States, United Arab Emirates
$117.6K - $161.7K / year