Staff Engineer, Security

Overview

NextGen Healthcare is hiring a Staff Security Engineer on its Security Engineering team to drive continuous improvements to the company's security posture, using automation, AI and emerging technologies to make security operations more efficient.

What you'll do

• Develop and maintain security tooling, guidelines and standards for the Security Engineering team.
• Collaborate with DevSecOps teams to author cloud-native security policies via Terraform and perform IaC scanning as part of all IaaS deployments.
• Participate in threat intelligence and forensic analysis exercises to predict and prevent attacks.
• Work closely with application and infrastructure teams to automate the mitigation of vulnerabilities across all cloud-hosted systems.
• Create and maintain thorough runbooks and incident response documentation for the Security Operations Center (SOC).
• Create and monitor correlated event dashboards in the SIEM, alerting against thresholds you develop.
• Leverage AI-enabled IDEs to speed up security reviews of infrastructure-as-code, pull requests and architecture designs, validating AI-generated findings and recommendations for accuracy.
• Use a Cloud-Native Application Protection Platform (CNAPP) to identify and prioritize misconfigurations, vulnerabilities, excessive permissions and exposure across cloud workloads, containers and pipelines, and integrate its findings with the SIEM.
• Research AI-driven threats, such as AI-enabled phishing and social engineering, prompt injection, data leakage and misuse of AI agents and tools, and translate them into detections, controls and guidance for engineering teams.
• Securely connect AI tools to the CNAPP, SIEM and other security data sources using the Model Context Protocol (MCP), including assessing the security risks of MCP servers, tool permissions and data access.
• Use AI tools to correlate CNAPP and SIEM data and provide contextual reporting on platform risk posture, turning findings into clear, prioritized and actionable insights for engineering teams and leadership.
• Research, implement and configure security protections for email, hosts and identities.
• Write scripts to automate manual tasks.

What you'll need

• Bachelor's Degree in Computer Science or a related discipline, or any combination of education and experience that provides the required qualifications.
• 6+ years of experience in systems engineering, software engineering, security or related experience.
• Experience with modern source control and ticketing tools such as Git, Jira and Confluence.
• Licenses or certifications in Amazon Web Services (AWS), Google Cloud Platform (GCP), OCSP, CEH, or similar.
• Knowledge of Windows or Linux shell scripting and coding with a language like Python.
• Knowledge of infrastructure-as-code tooling like CloudFormation and Terraform.
• Knowledge of deploying and managing enterprise-scale applications in cloud services like AWS.
• Knowledge of the Linux operating system.
• Knowledge of configuration management tools like Ansible, Puppet or Chef, and containerization technologies.
• Knowledge of building and testing software using Jenkins or similar continuous integration systems.
• Knowledge of relational and/or NoSQL databases like Microsoft SQL Server, PostgreSQL and MongoDB.
• Knowledge of Microsoft Office Suite.
• Knowledge of AI-assisted development and security tools such as Claude Code.
• Knowledge of the Model Context Protocol (MCP) and how it connects AI agents to tools and data, including its security implications.
• Knowledge of CNAPP platforms, SIEM platforms and log correlation.
• Knowledge of emerging AI-driven threats and defenses.
• Skill in working as a member of a team, communicating effectively and establishing and maintaining effective working relationships.
• Ability to determine how a system should work and how changes in conditions, operations and the environment will affect outcomes.
• Ability to work in a fast-paced environment, stay organized, prioritize workload, multi-task and meet deadlines.

Details

• Remote, Georgia (GA).