Staff Engineer, Security

Job Description:

The Staff Security Engineer will leverage automation, including nascent technologies, to increase efficiency in security operations. The ideal candidate is one who has a software engineering background with experience in protecting against application and infrastructure security threats.

Responsibilities:

• Develop and maintain security tooling, guidelines, and standards for the Security Engineering team.
• Collaborate with DevSecOps teams in authoring cloud native security policies via Terraform, and IaC scanning as part of all IaaS deployments.
• Participate in threat intelligence and forensic analysis exercises, to predict and prevent attacks.
• Work closely with application and infrastructure teams to automate the mitigation of vulnerabilities against all cloud hosted systems.
• Create and maintain thorough runbooks and incident response documentation for the Security Operations Center (SOC).
• Create and monitor correlated event dashboards in the SIEM, alerting against thresholds you develop.
• Research, implement, and configure security protections for email, hosts, and identities.
• Write scripts to automate manual tasks.
• Perform other duties that support the overall objective of the position.

Education Required:

• Bachelor's Degree in Computer Science or related discipline.
• Or, any combination of education and experience which would provide the required qualifications for the position.

Experience Required:

• 6+ years of experience in systems administration, software engineering, software development, or related experience.
• Experience with modern source control and ticketing tools such as Git, Jira, and Confluence.
• Experience in protecting against application and infrastructure security threats.

License/Certification Required:

• Amazon Web Services (AWS) Certified Solutions Architect / Developer / SysOps Administrator.

Knowledge, Skills & Abilities:

• Knowledge of Windows or Linux shell scripting and coding with a language like Python; infrastructure-as-code tooling like CloudFormation & Terraform; deploying and managing enterprise-scale applications in cloud services like AWS; Linux operating system; configuration management tools like Ansible, Puppet, Chef, and containerization technologies; building and testing software using Jenkins or similar continuous integration systems; relational and/or NoSQL databases like Microsoft SQL Server, PostgreSQL, and MongoDB; Microsoft Office Suite.
• Skill in working as a member of a team; communicating effectively; establishing and maintaining effective working relationships.
• Ability to determine how a system should work and how changes in conditions, operations, and the environment will affect outcomes; work in a fast-paced environment; stay organized, prioritize workload, multi-task, and meet deadlines.

NextGen Healthcare is an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all employees.