Security Engineer

As a Security Engineer, you will help operate, tune, and improve the technologies and processes that protect Imagine Pediatrics’ systems, data, and patients from cyber security threats. You will work hands-on across our cloud, endpoint, identity, and application security tooling as part of a small, collaborative security team that values curiosity as much as credentials.

You will partner day to day with our Senior Security Engineer. This is a genuinely collaborative pairing rather than a hand-off of tickets: you will brainstorm together, whiteboard approaches, pressure-test each other’s thinking, and jointly own the outcome of what you build. We expect you to bring ideas and push back when something doesn’t look right.

You will:

• Collaborate closely with the Senior Security Engineer to scope, design, and solution security initiatives, from early brainstorming through implementation and validation
• Participate in peer review of security configurations, policies, and automation, and contribute to shared documentation, runbooks, and design decisions
• Administer and tune core security platforms across endpoint detection and response, endpoint management and device compliance, email security, cloud access and network traffic monitoring, data loss prevention, and vulnerability management
• Support the security of our cloud infrastructure in Microsoft Azure/EntraID and Amazon Web Services (AWS), including identity and access management, logging and monitoring, network controls, encryption and key management, and configuration baselines
• Respond to alerts and escalations from our managed detection and response (MDR) provider and other security systems as part of the on-call rotation
• Interpret log outputs from a wide selection of IT, security, and cloud infrastructure, and help route the right telemetry into our centralized logging and SIEM solution
• Ensure configurations and deployments are aligned with relevant industry standards such as HITRUST, NIST, CIS Benchmarks, HIPAA, and the OWASP Top 10
• Translate framework requirements into practical technical controls, and apply them to new systems, cloud accounts, and services as the company grows rather than retrofitting them later
• Create, implement, and test incident response procedures for new threat content and alerts
• Respond to and resolve cyber security threats that may impact the confidentiality, integrity, or availability of Imagine Pediatrics systems and personnel
• Use AI tooling thoughtfully to reduce manual effort in areas such as log review, documentation, evidence preparation, scripting, and alert triage
• Ensure security control initiatives are executed on schedule and in line with Imagine Pediatrics Information Security program objectives and corporate policies
• Apply professional discretion and judgement when viewing sensitive and personal data or information in the process of conducting work
• Other duties as assigned, Lead corporate endpoint security architecture with a focus on macOS, designing secure-by-default controls, automation, patching, software distribution, and security baselines across macOS, iOS, Windows, and Linux. Manage configurations through Terraform, GitOps, version control, CI pipelines, and automated rollouts. Partner with IT and security teams to improve telemetry, detection, response, auditability, and operational efficiency. Mentor engineers and serve as a senior escalation point for complex endpoint security issues in a fully remote environment. Top Skills: BashFleetdmGitGitopsGoGoogle WorkspaceInfrastructure As CodeiOSJamf ProLdapLinuxmacOSOktaPowershellPythonTerraformWindows CrowdStrike, Own and improve enterprise security platforms, cloud and infrastructure security, identity governance, endpoint protection, vulnerability management, incident response, network controls, and DevSecOps practices. Lead complex security initiatives, compliance controls, vendor assessments, security architecture reviews, and AI security governance. Build automation with PowerShell and Python, partner with IT Operations and DevOps, reduce manual work, and serve as the senior escalation point for technical security incidents. Top Skills: Amazon SesAuth0AWSAws Identity CenterAzureChatgpt EnterpriseCi/CdCisco DuoCisco MerakiCisco UmbrellaClaudeConditional AccessContainersCrowdstrikeDastDkimDmarcInfrastructure As CodeKnowbe4KubernetesMcpMicrosoft 365Microsoft Entra IdMicrosoft GraphNist CsfPimPowershellPythonRapid7 InsightappsecRapid7 InsightidrRapid7 InsightvmRapid7 MdrRest ApisSastScimSendgridSnykSoc 2SpfSsoVpn

What you need to know about the Colorado Tech Scene

With a business-friendly climate and research universities like CU Boulder and Colorado State, Colorado has made a name for itself as a startup ecosystem. The state boasts a skilled workforce and high quality of life thanks to its affordable housing, vibrant cultural scene and unparalleled opportunities for outdoor recreation. Colorado is also home to the National Renewable Energy Laboratory, helping cement its status as a hub for renewable energy innovation.

Key Facts About Colorado Tech

• Number of Tech Workers: 260,000; 8.5% of overall workforce (2024 CompTIA survey)
• Major Tech Employers: Lockheed Martin, Century Link, Comcast, BAE Systems, Level 3
• Key Industries: Software, artificial intelligence, aerospace, e-commerce, fintech, healthtech
• Funding Landscape: $4.9 billion in VC funding in 2024 (Pitchbook)
• Notable Investors: Access Venture Partners, Ridgeline Ventures, Techstars, Blackhorn Ventures
• Research Centers and Universities: Colorado School of Mines, University of Colorado Boulder, University of Denver, Colorado State University, Mesa Laboratory, Space Science Institute, National Center for Atmospheric Research, National Renewable Energy Laboratory, Gottlieb Institute

First and foremost, you’re passionate and committed to reimagining pediatric health care and creating a world where every child with complex medical conditions gets the care and support they deserve.

• Bachelor of Science degree in Computer Science, Information Security, Business, Management, or a related field is preferred
• Relevant license(s) or certification(s): AWS Certified Security - Specialty, AWS Certified Solutions Architect - Associate, GIAC, Security+, CySA+, CEH, CISSP.
• 3+ years of experience as an Information Security Analyst, Risk Analyst, Security Engineer, Information Security Engineer, or similar role, ideally with 2 of those 3+ years within the healthcare industry
• Experience using Artificial Intelligence (AI) tools to enhance and automate security processes and procedures
• Experience managing HITRUST and HIPAA requirements and working with auditors
• Knowledge of IT systems such as AWS, Microsoft Intune, EntraID, JAMF, Meraki, and JIRA Service Management
• Strong diagnostic and problem-solving abilities, and an ability to innovate and grow knowledge in a fast-paced environment
• Comfortable working knowledge of key technology concepts such as access control, confidential data, encryption, business continuity, information security vulnerability scans, and cloud services
• Proven history executing business impact projects within defined scope, deliverables, and timeframe
• Ability to remain calm and lead the technical response to security incidents and data breaches, Designs and engineers secure network and cloud architectures across AWS, GCP, Azure, and physical data centers. Responsibilities include threat modeling, network segmentation, monitoring, alerting, automation, attack-surface reduction, and secure connection patterns. The role drives strategic security improvements, partners with product and infrastructure teams, communicates architectural decisions, and mentors engineers. Candidates need deep hybrid networking and cloud security expertise, protocol knowledge, scripting ability, independent problem-solving skills, and strong communication. Top Skills: AIApplied CryptographyAWSAzureCi/CdDnsGCPGoHttp/SHybrid Cloud NetworkingPrivate EndpointsPythonService MeshesShell ScriptingTcp/IpTlsTransit GatewaysVpcsZero Trust Architecture

Posted 5 Hours Ago Remote Hiring Remotely in United States 100K-135K Annually Mid level Remote Hiring Remotely in United States 100K-135K Annually Mid level Operate and improve cybersecurity tools and processes across cloud, endpoint, identity, application, email, network, data loss prevention, and vulnerability management environments. Respond to alerts and incidents, manage logging and SIEM telemetry, implement security controls aligned with HITRUST, NIST, CIS, HIPAA, and OWASP, support audits, and develop incident response procedures. Collaborate with a Senior Security Engineer and use AI tools to automate security operations. The summary above was generated by AI, The role offers a base salary range of $100,000 - $135,000 in addition to annual bonus incentive, competitive company benefits package and eligibility to participate in an employee equity purchase program (as applicable). When determining compensation, we analyze and carefully consider several factors including job-related knowledge, skills and experience. These considerations may cause your compensation to vary. We provide these additional benefits and perks:

• Competitive medical, dental, and vision insurance
• Healthcare and Dependent Care FSA; Company-funded HSA
• 401(k) with 4% match, vested 100% from day one
• Employer-paid short and long-term disability
• Life insurance at 1x annual salary
• 20 days PTO + 10 Company Holidays & 2 Floating Holidays
• Paid new parent leave
• Additional benefits to be detailed in offer

What We Live By We’re guided by our five core values:

Our Values:

• Children First. We put the best interests of children above all. We know that the right decision is always the one that creates more safe days at home for the children we serve today and in the future.
• Earn Trust. We listen first, speak second. We build lasting relationships by creating shared understanding and consistently following through on our commitments.
• Innovate Today. We believe that small improvements lead to big impact. We stay curious by asking questions and leveraging new ideas to learn and scale.
• Embrace Humanity. We lead with empathy and authenticity, presuming competence and good intentions. When we stumble, we use the opportunity to grow and understand how we can improve.
• One Team, Diverse Perspectives. We actively seek a range of viewpoints to achieve better outcomes. Even when we see things differently, we stay aligned on our shared mission and support one another to move forward - together.

Imagine Pediatrics is a tech enabled, pediatrician led medical group reimagining care for children with special health care needs. We deliver 24/7 virtual first and in home medical, behavioral, and social care, working alongside families, providers, and health plans to break down barriers to quality care. We do not replace existing care teams; we enhance them, providing an extra layer of support with compassion, creativity, and an unwavering commitment to children with medical complexity.