🎁 Before you apply, rehearse this interview. Create your free WorkMundi account and get an Interview Training on HelpsYouSpeak — no cost, no card. I want my training →
This is a small healthcare company. You must have heavy IAM Engineering experience. That will be your primary job. If you have experience in other areas of security they will put your skills to use. If not they will train up. Must be US citizen or have a Green Card. Our client can only hire in 22 states. We will let you know if your state is one they will hire in. The Security Engineer is responsible for designing, implementing, and operating the organization’s cybersecurity program from the ground up, with a primary focus on software supply chain security, identity and access management (IAM), permissions architecture, and compliance readiness for SOC 2 Type II and HIPAA within a healthcare environment. This role leads the research, planning, and execution of security policies, technical controls, and operational processes that protect endpoints, cloud infrastructure, applications, and data throughout the full software development lifecycle (SDLC). The Security Engineer builds and maintains security monitoring, threat detection, and alerting systems, while establishing and managing a company-wide Security Awareness Training Program. Essential Duties/Responsibilities: Research, develop, and implement comprehensive cybersecurity policies and procedures from the ground up to achieve and maintain SOC 2 Type II certification, including defining controls, gathering evidence, and coordinating with external auditors. Conduct regular risk assessments and vulnerability analyses to identify potential security threats and develop mitigation strategies aligned with HIPAA requirements and industry best practices. Design, implement, and manage Identity and Access Management (IAM) strategies, including role-based access control (RBAC), least privilege principles, multi-factor authentication (MFA), and single sign-on (SSO) solutions. Establish and enforce software supply chain security practices, including Software Bill of Materials (SBOM) management, dependency scanning, vulnerability assessment, container security, and secure CI/CD pipeline integration. Develop and maintain permissions governance frameworks, conducting regular access reviews and ensuring appropriate authorization levels across all systems handling PHI and sensitive data. Maintain incident response procedures, including breach notification processes compliant with HIPAA requirements, and lead security incident investigations and remediation efforts. Design, implement, and manage a comprehensive Security Awareness Training program for all workforce members, covering HIPAA requirements, phishing awareness, social engineering defense, and secure data handling practices. Track and document training completion for all employees, maintaining records for audit purposes and ensuring ongoing education as cyberthreats evolve. Collaborate with Development and DevOps teams to integrate security practices into the software development lifecycle (SDLC), including secure coding standards, code review processes, and automated security testing. Evaluate and manage third-party vendor security risks, conducting security assessments and ensuring business associates comply with HIPAA and organizational security requirements. Participate in an on-call rotation schedule for critical security incidents and support incident management processes for security-related events. Required Skills/Abilities: Proven experience in Information Security, Cybersecurity Engineering, or a similar role with hands-on experience implementing security programs and compliance frameworks. Strong knowledge of compliance frameworks including SOC 2 , HIPAA Security Rule, NIST Cybersecurity Framework, and CIS Controls, with experience preparing for and supporting audits. Deep expertise in Identity and Access Management ( IAM ), including experience with IAM platforms, RBAC implementation, MFA, SSO, and privileged access management. Experience with software supply chain security tools and practices, including SBOM generation, dependency scanning (e.g., Dependabot, Snyk ), and secure CI/CD pipeline configuration. Proficiency with endpoint protection solutions including EDR platforms, firewalls, and network security tools. Strong understanding of cloud security principles and experience securing AWS Excellent written and verbal communication skills, with the ability to translate complex security concepts for technical and non-technical audiences. Strong analytical, problem-solving, and incident response skills with attention to detail. Self-directed individual capable of working independently to build programs from the ground up with minimal supervision. Education/Experience: Bachelor's degree in information security, Computer Science, or related field; or equivalent combination of education and experience with at least 3-5 years of relevant cybersecurity experience. Demonstrated experience implementing security compliance programs (SOC 2, HIPAA, ISO 27001, or similar). Experience conducting risk assessments and developing security policies and procedures. Preferred Skill/Abilities Experience working within the Healthcare industry with direct knowledge of HIPAA compliance requirements and ePHI protection. Industry certifications such as CISSP, CISM, Security+, CCSP, AWS Security Specialty, or HCISPP (Healthcare Information Security and Privacy Practitioner). Experience with zero trust architecture design and implementation. Familiarity with healthcare data standards (HL7, FHIR) and healthcare IT systems including EHR platforms. Experience with policy-as-code tools (e.g., OPA, Checkov) and infrastructure-as-code security scanning. Scripting and automation skills in Python, PowerShell, or Bash for security automation. Experience with container security, Kubernetes security, and DevSecOps practices. Experience with Security Awareness Training platforms (e.g., KnowBe4, Proofpoint) and phishing simulation tools.
Here's how to pick the right one and stand out in your application.
144.883Jobs
31.687IN
81%EN
That number is real. WorkMundi's database shows 144,883 open engineer roles across the world. India has the most with 31,687 jobs, followed by the United States with 30,084. If you just finished reading one job ad and felt paralyzed by choice, you're not alone—but this scale is actually an advantage. It means you can afford to be selective.
Start by geography and language. The majority of engineer ads—117,837 of them—have the job posting text written in English. Use that as one filter, but remember: the ad text language tells you nothing about whether the role actually requires you to speak English day-to-day. Read the job description carefully. Then check which countries have the volume you're targeting. Singapore, Poland, and Australia round out the top five after India and the US.
Next, learn who's hiring. Accenture has posted 2,801 engineer roles. andurilindustries, speechify, and jobgether are also actively recruiting. If you're applying to one of these names, research their hiring patterns and interview style before you apply. That homework pays off.
When you interview, expect the question every engineer hears: 'Tell me about a time you had to debug a problem that wasn't in your job description.' Have a specific story ready—not a general one. Name the tools, the deadline pressure, and what you learned. Hiring managers listen for whether you see problem-solving as part of the role itself, not a favour.