Associate Security Engineer

The primary purpose of this role is to serve as the day-to-day Product Security Liaison (PSL) for one or more assigned Veradigm products, assisting development and operational teams in the appropriate application of security best practices and the use of advanced security technologies.

Working under the guidance of senior PSLs and security leadership, the Associate PSL is the primary security point of contact for assigned product teams. The role triages and tracks remediation of cloud, application, infrastructure, and code-level security findings; helps teams implement future-state security requirements; supports the security exception process; and reports product security posture to engineering and executive leadership.

Serve as the assigned security liaison for one or more products, acting as the primary point of contact between the security organization and product development, DevOps, cloud operations, and hosting teams.

• Assist development and operational teams in the appropriate application of security best practices and the use of advanced security technologies.

• Accountable for correctly identifying security vulnerabilities and for building and executing remediation plans with product teams, including the tuning and integration of security tools to reduce false positives.

• Triage, validate, and route findings from cloud security, vulnerability scanning, application security testing, and bug bounty programs; create and track remediation tickets to closure within defined SLAs.

• Prepare and present recurring security posture reports for assigned products, summarizing risk, open exceptions, and remediation progress for engineering and executive leadership.

• Assist product teams in implementing future-state security requirements and maturity initiatives, tracking progress and gathering evidence of completion.

• Review and provide security input on product architecture, design changes, and cloud/network configuration requests with guidance from senior PSLs.

• Support the security exception process for assigned products, documenting risk, compensating controls, owners, and expiration dates.

• Support day-to-day technical controls and escalation events from both security tools and the SOC; investigate alerts assigned to the PSL and coordinate response with product teams.

• Assist in the implementation of security solutions and ensure the fidelity of alerts/reports to the Security Operations Center.

• Participate in the definition and documentation of runbooks for SOC and product security processes, including process and procedure documentation.

• Participate in security reviews and sign-off activities for assigned products, such as disaster recovery/business continuity plans and new builds or releases.

• Review and participate in benchmarking, installation, upgrade, configuration, deployment, and tuning activity for security solutions used by assigned products.

• Investigate innovative approaches to improve datacenter, cloud, and application hosting security.

• Experience in Linux OS administration

• Bachelor’s Degree or equivalent
• 0-2 years of relevant job experience

Preferred Experience

• Linux, Windows, Splunk, Azure, AWS, CI/CD security, and application security principles
• Understanding of HIPAA healthcare data security

Knowledge, Skills & Abilities

• Working knowledge of common vulnerability classes (e.g., OWASP Top 10, CWE) and severity/prioritization methods (e.g., CVSS, EPSS, CISA KEV)

• Understanding of cloud security fundamentals, including identity and access management, least privilege, network segmentation, encryption, and logging

• Ability to translate technical findings into clear business risk for engineering and executive audiences

• Ability to manage priorities across multiple product teams and follow findings through to verified closure

• Clear written communication for tickets, runbooks, technical documentation, and presentations

• Familiarity with attacker techniques and frameworks such as MITRE ATT&CK

• Ability to handle protected health information (PHI) and other confidential data with discretion

• Willingness to learn, seek guidance, and grow into a fully independent PSL

This is Raleigh, NC-based hybrid role, requiring 2-days in the office each week.

Compensation for this job is subject to market conditions, geographic considerations, the candidate’s unique skills and experience, state and local laws, and budget. Our commitment to pay transparency is a testament to our dedication to creating a fair, equitable, and inclusive workplace. By continuously analyzing market trends, staying abreast of changes in state laws, and making budgetary adjustments accordingly, we strive to ensure that our compensation practices reflect the value we place on our associates’ unique contributions and support their professional growth.

Enhancing Lives and Building Careers

Veradigm believes in empowering our associates with the tools and flexibility to bring the best version of themselves to work and to further their professional development. Together, we are In the Network. Interested in learning more?

Take a look at our Culture, Benefits, Early Talent Program, and Additional Openings.

Visa Sponsorship is not offered for this position.

At Veradigm, our greatest strength comes from bringing together talented people with diverse perspectives to support the needs of healthcare providers, life science companies, health plans, and the patients they serve. The Veradigm Network is a dynamic, open community of solutions, external partners, and cutting-edge artificial intelligence technologies that provide advanced insights, technology, and data-driven solutions. Veradigm offers a comprehensive compensation and benefits package, including holidays, vacation, medical, dental, and vision insurance, company paid life insurance and retirement savings.