[Remote] Principal Cybersecurity Engineer & Security Auditor

Note: The job is a remote job and is open to candidates in USA. CyberCoders is seeking a Principal Cybersecurity Engineer & Security Auditor for a complex healthcare organization environment. The role leads technical security engineering, independent security audits, penetration testing, security architecture, incident response, compliance assessments, and protection of clinical systems, while mentoring teams and driving remediation.

Responsibilities

• Lead and execute hands-on technical security assessments, penetration tests, red team activities, and vulnerability validation across complex enterprise and clinical environments
• Design, implement, and optimize security architecture and controls for network, endpoints, identity, cloud, and clinical systems (PACS, RIS, VNA, DICOM, HL7)
• Perform independent security audits and compliance assessments focused on HIPAA and healthcare-specific regulations; prepare audit evidence and remediation roadmaps
• Administer and tune Fortinet FortiGate devices and centralized management/analytics (FortiManager, FortiAnalyzer) to enforce network segmentation, IDS/IPS, and VPN security
• Deploy, configure and tune Microsoft Defender for Endpoint, Azure AD identity protections, and Azure Sentinel (or equivalent SIEM) for detection, hunting, and automated response
• Develop and execute ransomware resilience programs including detection rules, backup validation, IR playbooks, containment strategies, and tabletop exercises
• Investigate security incidents and lead forensic analysis and remediation planning to remove adversary persistence and restore secure operations
• Evaluate, harden, and secure clinical imaging and information systems (PACS, RIS, VNA) and their interfaces (DICOM, HL7) to maintain patient safety and data confidentiality
• Perform risk assessments (including CRQ/Risk Register updates), third-party security reviews, and vendor security management
• Create clear, actionable audit reports, technical findings, and executive-level briefings; track remediation and verify closure
• Mentor and coach engineering and security teams; drive security best practices, secure development guidance, and cross-functional collaboration
• Contribute to security policy, standards, and architecture documentation while staying current with threat trends, tools, and healthcare cybersecurity guidance

Skills

• • Bachelors degree in Computer Science, Information Security, or a related field, or equivalent experience
• • 10+ years of progressive cybersecurity experience with substantial hands-on engineering and assessment work in enterprise environments
• • Demonstrated experience conducting technical security assessments, penetration tests, and red/blue team exercises in complex environments
• • Strong hands-on experience with Fortinet FortiGate, FortiManager, and FortiAnalyzer administration and policy management
• • Practical experience deploying and tuning Microsoft Defender for Endpoint, identity protection (Azure AD), and Sentinel or equivalent SIEM for threat detection and response
• • Proven incident response, digital forensics, and ransomware mitigation experience including playbook creation and tabletop leadership
• • Familiarity with clinical systems and protocols including PACS, RIS, VNA, DICOM, and HL7 and understanding of their security and patient-safety implications
• • Deep knowledge of HIPAA requirements, healthcare compliance, and experience performing HIPAA readiness assessments and audits
• • Relevant professional certifications such as HCISPP, OSCP, CRISC, and GIAC certifications are highly desirable and demonstrate required technical and governance skills
• • Strong networking, scripting, and systems skills (TCP/IP, routing/switching, Linux, Windows, cloud platforms, automation with PowerShell/Python)
• • Excellent written and verbal communication skills with ability to produce audit reports and present technical findings to executive leadership
• • Proven ability to lead cross-functional teams, manage remediation projects, and influence security outcomes across a large organization
• For this position, you must be currently authorized to work in the United States without the need for sponsorship for a non-immigrant visa
• Advanced degree preferred
• Experience in healthcare or HealthTech strongly preferred

Benefits

• This is a remote first role with occasional travel to HQ in Seattle.

Company Overview