Security Engineer

At MD Integrations, we partner with digital health brands to power clinical care at scale. We specialize in men's and women’s health, dermatology, endocrinology, and weight management, offering telehealth solutions that help patients receive expert, personalized care—all from the comfort of their home. Join our team and be part of the movement to make specialty care more accessible and impactful.

MD Integrations (MDI) is seeking a Security Engineer to help protect our cloud infrastructure, applications, endpoints, and users. This role will focus on security operations, vulnerability management, incident response, application security, and administration of key security platforms across our environment.

The ideal candidate is a hands-on security generalist who can identify risk, investigate security events, own findings through remediation, and work closely with Systems Operations, DevOps, and Engineering teams to ensure issues are resolved appropriately. Security will generally own the finding, prioritization, coordination, and validation, while the team responsible for the affected system will own implementation of the remediation.

This position reports directly to the Sr. Director, Systems Operations and is fully remote. Availability during and after core business hours may be required as business needs dictate.

1. Security Operations & Incident Response
2. • Monitor and investigate security alerts across CrowdStrike Falcon Complete, CrowdStrike Next-Gen SIEM, Cloudflare, AWS, and other security platforms. Serve as the internal owner for CrowdStrike Falcon Complete, including policy management, escalation review, response coordination, containment validation, integrations, and coordination with the MDR provider.
   • Actively participate in incident response, including investigation, containment, root cause analysis, remediation coordination, and post-incident follow-up. Execute approved containment actions such as endpoint isolation, credential or account remediation, indicator blocking, and access-control changes.
   • Own and tune SIEM alerts, detections, integrations, and workflows, and work with DevOps and Systems teams to onboard additional log and telemetry sources.
3. Vulnerability & Application Security
4. • Own the vulnerability management lifecycle from identification through prioritization, SLA tracking, remediation coordination, rescanning, validation, and closure.
   • Manage findings from Dependabot, SAST, DAST, software composition analysis, secrets detection, penetration testing, cloud security reviews, and other vulnerability sources while working closely with Engineering on remediation.
   • Coordinate external penetration testing and rescans while performing internal security assessments and validation where appropriate.
5. Endpoint, Cloud & Zero Trust Security
6. • Own CrowdStrike endpoint security operations, including policy management, alert investigation, endpoint security posture, and remediation coordination.
   • Review AWS security posture, IAM permissions, network security controls, and cloud configurations to identify weaknesses and provide prescriptive remediation guidance.
   • Support Cloudflare Zero Trust and security policies, including access controls, web content filtering, suspicious activity investigation, and policy review.
7. Security Platforms, Awareness & Automation
8. • Own and administer security platforms including CrowdStrike, KnowBe4, SIEM, SAST/DAST, and other security technologies.
   • Manage KnowBe4 phishing simulations, security awareness training, reporting, and follow-up activities.
   • Automate recurring security tasks, integrations, and reporting using Python, Bash, APIs, or similar technologies.
9. Compliance & Security Governance
10. • Implement, operate, and maintain technical security controls that support the organization’s SOC 2, ISO 27001, HIPAA, and other applicable compliance obligations.
    • Support technical control remediation, validation, and documentation needed for audits and internal reviews.
    • Help evaluate new security technologies and provide recommendations based on security, operational, and business requirements.

• Security-minded – You approach systems, applications, and operations with risk reduction in mind.
• Investigative – You enjoy digging into alerts, logs, and unusual behavior to understand what happened and why.
• Ownership-focused – You follow findings and incidents through resolution instead of simply handing them off.
• Collaborative – You work effectively with DevOps, Systems Operations, Engineering, and external security partners.
• Automation-oriented – You look for opportunities to reduce repetitive security work through scripting and integrations.
• Strong communicator – You can clearly explain risk, findings, and remediation requirements to technical and non-technical stakeholders.
• Self-starter – You can work independently, prioritize effectively, and manage multiple security initiatives at once.

• 3-6 years of experience in Security Engineering, Security Operations, Cloud Security, or a closely related role.
• Hands-on experience administering an endpoint detection and response (EDR) platform and working with a managed detection and response (MDR) provider.
• Experience operating or tuning a SIEM, investigating security alerts, and onboarding new log sources.
• Strong experience managing vulnerabilities from discovery through prioritization, remediation, validation, and closure.
• Experience with SAST, DAST, software composition analysis, dependency scanning, secrets detection, and application security tooling.
• Practical AWS security experience, including IAM, logging, networking, and cloud configuration review.
• Experience supporting security investigations, incident containment, root cause analysis, and remediation coordination.
• Experience with Cloudflare, Zero Trust technologies, WAF, or similar edge security platforms is preferred.
• Experience administering security awareness and phishing simulation platforms such as KnowBe4.
• Proficiency with Python, Bash, APIs, or similar technologies for security automation, integrations, and reporting.
• Ability to clearly communicate technical security risk and remediation requirements to Engineering, DevOps, Systems Operations, and other stakeholders.
• Familiarity with SOC 2, ISO 27001, and HIPAA compliance requirements, with experience coordinating penetration tests, vulnerability rescans, or third-party security assessments.
• HITRUST experience is a plus.