Security Operations Engineer

Who you are

• Experience: 3–5 years of dedicated hands-on experience in Security Operations, IT Security, or System Administration with a strong security focus
• Incident Response: Proven background in actively detecting, investigating, and remediating security incidents in a modern cloud/hybrid environment
• Technical Depth: Deep foundational IT background spanning endpoint administration (macOS/Windows), identity management, and network security
• Compliance Standards: Demonstrated experience maintaining controls for SOC2 and/or HIPAA frameworks in an operational setting
• Automation Mindset: Hands-on experience automating security operations or IT tasks using SOAR platforms, scripting (Python, PowerShell, Bash), or API integrations
• If you thrive in a fast-paced environment where you are empowered to own your domain, automate repetitive tasks, and directly safeguard patient and organizational data, this role is for you
• Direct experience implementing SOC2 or HIPAA controls from scratch or directly interfacing with external auditors
• Hands-on familiarity with our specific technology stack: Sumo Logic, Jamf, Intune, Slack Enterprise, CrowdStrike, and Torq
• Relevant industry certifications (e.g., Security+, Network+, GIAC, or vendor-specific platform certifications)

What the job involves

• As a Security Engineer at K Health, you will serve as a foundational force in securing our healthcare technology ecosystem
• Reporting directly to the Director of Security, this is a deeply hands-on individual contributor role focused primarily on Security Operations (SecOps) and IT Security projects
• You will be responsible for building, automating, and maintaining our security controls while acting as a key responder to security incidents
• Design, implement, and maintain hands-on SecOps workflows, threat detection, and incident response procedures across our corporate and cloud infrastructure
• Build low-code and custom automations (using tools like Torq) to streamline security alerts, routine IT security tasks, and incident triage
• Administer, optimize, and manage key security and endpoint management tools, including Sumo Logic, Jamf, Intune, Slack Enterprise, CrowdStrike, and related platforms
• Maintain and support continuous compliance with SOC2 and HIPAA security controls, actively participating in audit preparation, evidence gathering, and control enforcement
• Partner with cross-functional IT and engineering teams to harden systems, enforce zero-trust endpoint policies, and secure employee workflows
• Conduct root-cause analysis on security incidents and proactively implement preventative security measures to eliminate recurring risks

Benefits

• Equity in K Health for all full-time employees
• Our hybrid work schedule offers working from home and in-office days
• Up to 6 weeks of parental leave with additional leave offered through our 3rd party administrator, Sparrow
• 18 Vacation days, 5 sick days, and 2 personal days (plus days off for national holidays and multiple company-wide 3 day weekends per year)
• Choose between three comprehensive plans for your medical, dental, and vision (employees are also eligible to use our K Health app for free!)
• Gym Reimbursement for any employees who are enrolled in a medical plan
• K will match 100% of employee contributions to their 401(k) up to 3% of their salary, and then 50% up to 5%
• FSAs, HSA, Parking and Commuter accounts