Principal Security Engineer

A mid-size hospital system based in Philadelphia is seeking an experienced Lead Security Engineer to join its Cyber Security team. This role will serve as a hands-on technical leader for the organization’s blue team security operations, while also managing and mentoring a team of three security analysts. Red team experience is a strong plus.

This individual will play a critical role in protecting the organization’s cloud and enterprise environments, leading incident response efforts, strengthening vulnerability management practices, and advancing the overall security maturity of the organization., * Lead day-to-day blue team security operations, including incident response, threat detection, and vulnerability management

• Serve as an escalation point for security incidents, conducting hands-on investigations related to malware, data loss, insider threats, and other security events
• Manage, mentor, and develop a team of three security analysts, providing technical guidance, prioritization, and performance oversight
• Design, implement, and optimize security controls across Microsoft Azure and O365 environments, including identity, endpoint, and cloud security
• Utilize and manage Microsoft security tools such as Microsoft Defender, Microsoft Sentinel (SIEM/SOAR), and related Azure security services to monitor, detect, and respond to threats

Contribute to the development and implementation of the organization’s security governance model, policies, and standards

Develop and maintain security metrics and reporting to measure operational effectiveness, risk posture, and security maturity

Partner closely with IT, infrastructure, cloud, and business stakeholders to understand requirements and influence system and architectural decisions from a security perspective

Support vulnerability assessment and remediation efforts, working with technical teams to drive risk reduction

Collaborate with red team resources as applicable; prior hands-on red team or offensive security experience is a strong plus

We are a company committed to creating diverse and inclusive environments where people can bring their full, authentic selves to work every day. We are an equal opportunity/affirmative action employer that believes everyone matters. Qualified candidates will receive consideration for employment regardless of their race, color, ethnicity, religion, sex (including pregnancy), sexual orientation, gender identity and expression, marital status, national origin, ancestry, genetic factors, age, disability, protected veteran status, military or uniformed service member status, or any other status or characteristic protected by applicable laws, regulations, and ordinances. If you need assistance and/or a reasonable accommodation due to a disability during the application or recruiting process, please send a request to HR@insightglobal.com.To learn more about how we collect, keep, and process your private information, please review Insight Global’s Workforce Privacy Policy: https://insightglobal.com/workforce-privacy-policy/.

• 5+ years of hands-on experience in information security, with a strong blue team focus
• Proven experience in incident response, threat detection, and vulnerability management
• Hands-on experience with Microsoft Defender and Microsoft Sentinel
• Experience securing Azure and Microsoft 365 environments
• 3+ years of experience leading or managing security personnel
• Ability to act as an escalation point and lead security investigations
• Hands-on experience developing and implementing blue team cybersecurity controls to secure AI/ML systems, data pipelines, and infrastructure
• Bachelor’s degree in a related field or equivalent hands-on experience - CISSP required
• Red team or offensive security experience
• Healthcare or highly regulated industry experience
• Experience building or maturing security programs and metrics