Information Security Engineer (IS Engr I) - REMOTE

Are you looking for a meaningful and satisfying career where you have endless opportunities to grow and be financially rewarded? Net Health may be the perfect place for you.   

A high-growth and profitable company, we help caregivers harness data for human health. We also honor and respect the needs of our Net Health family and staff, which is why we offer a work-from-anywhere environment and unlimited PTO. Our welcoming and collaborative culture paired with progressive benefits makes Net Health the ultimate career home! 

As a leading-edge SaaS company in healthcare, we deliver solutions that help patients get better, faster, and live more fulfilling lives. Our software and predictive analytics cover the continuum of care, from hospital-to-home, across various medical specialties. Come join us and start the next chapter of your exciting career while helping others to live better lives.  

#WorkFromAnywhere #UnlimitedPTO #ComprehensiveBenefitsPackage #EmployeeResourceGroups #CasualDressCode #PrioritizedEmployeeWellness #DiversityAndInclusion #AVoice #NewHireSupport #CareerDevelopment #EducationalAssistance #EmployeeReferralBonus #ProgressiveParentalLeave    

We're hiring an Information Security Engineer to help close out the engineering work on our security roadmap. You'll take on cloud security projects in Azure as they come up, drive vulnerability remediation alongside our development teams, secure our AI projects, and serve on-call through CrowdStrike Falcon Complete. You'll also apply a security lens to new projects through vendor reviews and risk assessments and help us get ahead of post-quantum cryptography readiness before it becomes urgent.

The work is varied. In a given month you might be implementing a new control in Azure, sitting with a dev team to close a critical CVE, reviewing an MCP server before it goes live, assessing a new API partner, or running an access review. We want someone who moves comfortably between all of it.
We're looking for someone who treats AI as a practical security tool and understands how AI agents and MCPs actually work, including where they introduce risk. If you've already thought about what it means to govern agent access to enterprise data, we want to talk to you.
Our ideal candidate is responsive, independent, and self-directed. Someone who spots security problems early and sees them through to resolution.

• →Cloud Security Engineering
  • →Own Azure cloud security projects, including control enablement
  • →Represent security on the Cloud Architecture Review Board and Change Advisory Board
  • →Help build our post-quantum cryptography readiness plan
• →Vulnerability Management & Security Operations
  • →Drive vulnerability remediation with dev teams through CrowdStrike and OX Security
  • →Participate in the security on-call rotation, triaging through CrowdStrike Complete
• →AI Security
  • →Evaluate and secure AI tools, integrations, and agents before deployment
  • →Review and approve MCP servers against our governance model
  • →Support the AI Steering Committee on security requirements for AI initiatives
• →Risk & Access Review
  • →Complete vendor and employee software requests, approving or denying based on risk tolerance
  • →Conduct architecture, product, and engineering design risk reviews early in the SDLC
  • →Own quarterly all-user access reviews

• 5+ years in security engineering or cloud security
• Demonstrated experience running access reviews

1. Working knowledge of AI agents and MCP, including the access and data exposure risks they create

• • Hands-on with Claude, CrowdStrike, OX Security, Delinea, or comparable tooling

       2. Track record of driving projects to completion with minimal oversight

       3. Highly responsive, with clear stakeholder communication throughout a project

• • Able to participate in an on-call rotation

• Microsoft Azure
• CrowdStrike

Candidate Integrity & Monitoring Notice: We maintain a zero-tolerance policy for using AI tools, deepfakes, or impersonation to misrepresent a candidate's identity, skills, or qualifications during hiring. We use screening and identity verification methods to detect this and reserve the right to disqualify and report violations. Company-issued equipment, systems, and network activity are monitored for security and compliance purposes; details are provided during interviews and in our employee policies.