← Back to Jobs

Security Engineer

MD Integrations • Remote

<div><body><p style='font-family:"Basel Grotesk",Arial,sans-serif;font-size:11pt;font-weight:400;line-height:1.38;letter-spacing:0.25px;margin:12pt 0px;padding:0px;'><b><strong style="color:rgb(0,0,0);font-size:12pt;white-space:pre-wrap;">Overview</strong></b></p><p style='font-family:"Basel Grotesk",Arial,sans-serif;font-size:11pt;font-weight:400;line-height:1.38;letter-spacing:0.25px;margin:12pt 0px;padding:0px;'><span style="color:rgb(0,0,0);font-size:11pt;white-space:pre-wrap;">MD Integrations (MDI) is seeking a Security Engineer to help protect our cloud infrastructure, applications, endpoints, and users. This role will focus on security operations, vulnerability management, incident response, application security, and administration of key security platforms across our environment.</span></p><p style='font-family:"Basel Grotesk",Arial,sans-serif;font-size:11pt;font-weight:400;line-height:1.38;letter-spacing:0.25px;margin:12pt 0px;padding:0px;'><span style="color:rgb(0,0,0);font-size:11pt;white-space:pre-wrap;">The ideal candidate is a hands-on security generalist who can identify risk, investigate security events, own findings through remediation, and work closely with Systems Operations, DevOps, and Engineering teams to ensure issues are resolved appropriately. Security will generally own the finding, prioritization, coordination, and validation, while the team responsible for the affected system will own implementation of the remediation.</span></p><p style='font-family:"Basel Grotesk",Arial,sans-serif;font-size:11pt;font-weight:400;line-height:1.38;letter-spacing:0.25px;margin:12pt 0px;padding:0px;'><span style="color:rgb(0,0,0);font-size:11pt;white-space:pre-wrap;">This position reports directly to the Sr. Director, Systems Operations and is fully remote. Availability during and after core business hours may be required as business needs dictate.</span></p><p style='font-family:"Basel Grotesk",Arial,sans-serif;font-size:11pt;font-weight:400;line-height:1.38;letter-spacing:0.25px;margin:12pt 0px;padding:0px;'><b><strong style="color:rgb(0,0,0);font-size:12pt;white-space:pre-wrap;"> What You’ll Be Accountable For</strong></b></p><ol style='font-family:"Basel Grotesk",Arial,sans-serif;font-size:11pt;font-weight:400;margin:8px 0px;line-height:1.6;padding:0px 0px 0px 32px;list-style-type:decimal;'><li style="color:rgb(0,0,0);margin:0pt 0px;font-size:11pt;line-height:1.38;letter-spacing:0.25px;"><b><strong style="color:rgb(0,0,0);font-size:11pt;white-space:pre-wrap;">Security Operations &amp; Incident Response</strong></b></li><li style="margin:3px 0px;font-size:11pt;line-height:1.6;list-style:none;letter-spacing:0.25px;"><ul style='font-family:"Basel Grotesk",Arial,sans-serif;font-size:11pt;font-weight:400;margin-left:0px;margin-right:0px;line-height:1.6;padding:0px 0px 0px 32px;list-style-type:circle;'><li style="color:rgb(0,0,0);margin:0pt 0px;font-size:11pt;line-height:1.38;letter-spacing:0.25px;"><span style="color:rgb(0,0,0);font-size:10pt;white-space:pre-wrap;">Monitor and investigate security alerts across CrowdStrike Falcon Complete, CrowdStrike Next-Gen SIEM, Cloudflare, AWS, and other security platforms. Serve as the internal owner for CrowdStrike Falcon Complete, including policy management, escalation review, response coordination, containment validation, integrations, and coordination with the MDR provider.</span></li><li style="color:rgb(0,0,0);margin:0pt 0px;font-size:11pt;line-height:1.38;letter-spacing:0.25px;"><span style="color:rgb(0,0,0);font-size:10pt;white-space:pre-wrap;">Actively participate in incident response, including investigation, containment, root cause analysis, remediation coordination, and post-incident follow-up. Execute approved containment actions such as endpoint isolation, credential or account remediation, indicator blocking, and access-control changes.</span></li><li style="color:rgb(0,0,0);margin:0pt 0px;font-size:11pt;line-height:1.38;letter-spacing:0.25px;"><span style="color:rgb(0,0,0);font-size:10pt;white-space:pre-wrap;">Own and tune SIEM alerts, detections, integrations, and workflows, and work with DevOps and Systems teams to onboard additional log and telemetry sources.</span></li></ul></li><li style="color:rgb(0,0,0);margin:0pt 0px;font-size:11pt;line-height:1.38;letter-spacing:0.25px;"><b><strong style="color:rgb(0,0,0);font-size:11pt;white-space:pre-wrap;">Vulnerability &amp; Application Security</strong></b></li><li style="margin:3px 0px;font-size:11pt;line-height:1.6;list-style:none;letter-spacing:0.25px;"><ul style='font-family:"Basel Grotesk",Arial,sans-serif;font-size:11pt;font-weight:400;margin-left:0px;margin-right:0px;line-height:1.6;padding:0px 0px 0px 32px;list-style-type:circle;'><li style="color:rgb(0,0,0);margin:0pt 0px;font-size:11pt;line-height:1.38;letter-spacing:0.25px;"><span style="color:rgb(0,0,0);font-size:10pt;white-space:pre-wrap;">Own the vulnerability management lifecycle from identification through prioritization, SLA tracking, remediation coordination, rescanning, validation, and closure.</span></li><li style="color:rgb(0,0,0);margin:0pt 0px;font-size:11pt;line-height:1.38;letter-spacing:0.25px;"><span style="color:rgb(0,0,0);font-size:10pt;white-space:pre-wrap;">Manage findings from Dependabot, SAST, DAST, software composition analysis, secrets detection, penetration testing, cloud security reviews, and other vulnerability sources while working closely with Engineering on remediation.</span></li><li style="color:rgb(0,0,0);margin:0pt 0px;font-size:11pt;line-height:1.38;letter-spacing:0.25px;"><span style="color:rgb(0,0,0);font-size:10pt;white-space:pre-wrap;">Coordinate external penetration testing and rescans while performing internal security assessments and validation where appropriate.</span></li></ul></li><li style="color:rgb(0,0,0);margin:0pt 0px;font-size:11pt;line-height:1.38;letter-spacing:0.25px;"><b><strong style="color:rgb(0,0,0);font-size:11pt;white-space:pre-wrap;">Endpoint, Cloud &amp; Zero Trust Security</strong></b></li><li style="margin:3px 0px;font-size:11pt;line-height:1.6;list-style:none;letter-spacing:0.25px;"><ul style='font-family:"Basel Grotesk",Arial,sans-serif;font-size:11pt;font-weight:400;margin-left:0px;margin-right:0px;line-height:1.6;padding:0px 0px 0px 32px;list-style-type:circle;'><li style="color:rgb(0,0,0);margin:0pt 0px;font-size:11pt;line-height:1.38;letter-spacing:0.25px;"><span style="color:rgb(0,0,0);font-size:10pt;white-space:pre-wrap;">Own CrowdStrike endpoint security operations, including policy management, alert investigation, endpoint security posture, and remediation coordination.</span></li><li style="color:rgb(0,0,0);margin:0pt 0px;font-size:11pt;line-height:1.38;letter-spacing:0.25px;"><span style="color:rgb(0,0,0);font-size:10pt;white-space:pre-wrap;">Review AWS security posture, IAM permissions, network security controls, and cloud configurations to identify weaknesses and provide prescriptive remediation guidance.</span></li><li style="color:rgb(0,0,0);margin:0pt 0px;font-size:11pt;line-height:1.38;letter-spacing:0.25px;"><span style="color:rgb(0,0,0);font-size:10pt;white-space:pre-wrap;">Support Cloudflare Zero Trust and security policies, including access controls, web content filtering, suspicious activity investigation, and policy review.</span></li></ul></li><li style="color:rgb(0,0,0);margin:0pt 0px;font-size:11pt;line-height:1.38;letter-spacing:0.25px;"><b><strong style="color:rgb(0,0,0);font-size:11pt;white-space:pre-wrap;">Security Platforms, Awareness &amp; Automation</strong></b></li><li style="margin:3px 0px;font-size:11pt;line-height:1.6;list-style:none;letter-spacing:0.25px;"><ul style='font-family:"Basel Grotesk",Arial,sans-serif;font-size:11pt;font-weight:400;margin-left:0px;margin-right:0px;line-height:1.6;padding:0px 0px 0px 32px;list-style-type:circle;'><li style="color:rgb(0,0,0);margin:0pt 0px;font-size:11pt;line-height:1.38;letter-spacing:0.25px;"><span style="color:rgb(0,0,0);font-size:10pt;white-space:pre-wrap;">Own and administer security platforms including CrowdStrike, KnowBe4, SIEM, SAST/DAST, and other security technologies.</span></li><li style="color:rgb(0,0,0);margin:0pt 0px;font-size:11pt;line-height:1.38;letter-spacing:0.25px;"><span style="color:rgb(0,0,0);font-size:10pt;white-space:pre-wrap;">Manage KnowBe4 phishing simulations, security awareness training, reporting, and follow-up activities.</span></li><li style="color:rgb(0,0,0);margin:0pt 0px;font-size:11pt;line-height:1.38;letter-spacing:0.25px;"><span style="color:rgb(0,0,0);font-size:10pt;white-space:pre-wrap;">Automate recurring security tasks, integrations, and reporting using Python, Bash, APIs, or similar technologies.</span></li></ul></li><li style="color:rgb(0,0,0);margin:0pt 0px;font-size:11pt;line-height:1.38;letter-spacing:0.25px;"><b><strong style="color:rgb(0,0,0);font-size:11pt;white-space:pre-wrap;">Compliance &amp; Security Governance</strong></b></li><li style="margin:3px 0px;font-size:11pt;line-height:1.6;list-style:none;letter-spacing:0.25px;"><ul style='font-family:"Basel Grotesk",Arial,sans-serif;font-size:11pt;font-weight:400;margin-left:0px;margin-right:0px;line-height:1.6;padding:0px 0px 0px 32px;list-style-type:circle;'><li style="color:rgb(0,0,0);margin:0pt 0px;font-size:11pt;line-height:1.38;letter-spacing:0.25px;"><span style="color:rgb(0,0,0);font-size:10pt;white-space:pre-wrap;">Implement, operate, and maintain technical security controls that support the organization’s SOC 2, ISO 27001, HIPAA, and other applicable compliance obligations.</span></li><li style="color:rgb(0,0,0);margin:0pt 0px;font-size:11pt;line-height:1.38;letter-spacing:0.25px;"><span style="color:rgb(0,0,0);font-size:10pt;white-space:pre-wrap;">Support technical control remediation, validation, and documentation needed for audits and internal reviews.</span></li><li style="color:rgb(0,0,0);margin:0pt 0px;font-size:11pt;line-height:1.38;letter-spacing:0.25px;"><span style="color:rgb(0,0,0);font-size:10pt;white-space:pre-wrap;">Help evaluate new security technologies and provide recommendations based on security, operational, and business requirements.</span></li></ul></li></ol><p style='font-family:"Basel Grotesk",Arial,sans-serif;font-size:11pt;font-weight:400;line-height:1.38;letter-spacing:0.25px;margin:12pt 0px;padding:0px;'><span style="color:rgb(0,0,0);font-size:11pt;white-space:pre-wrap;"> </span></p><p style='font-family:"Basel Grotesk",Arial,sans-serif;font-size:11pt;font-weight:400;line-height:1.38;letter-spacing:0.25px;margin:12pt 0px;padding:0px;'><b><strong style="color:rgb(0,0,0);font-size:12pt;white-space:pre-wrap;">Your Work DNA</strong></b></p><ul style='font-family:"Basel Grotesk",Arial,sans-serif;font-size:11pt;font-weight:400;margin:8px 0px;line-height:1.6;padding:0px 0px 0px 32px;list-style-type:disc;'><li style="color:rgb(0,0,0);margin:0pt 0px;font-size:11pt;line-height:1.38;letter-spacing:0.25px;"><b><strong style="color:rgb(0,0,0);font-size:11pt;white-space:pre-wrap;">Security-minded</strong></b><span style="color:rgb(0,0,0);font-size:11pt;white-space:pre-wrap;"> – You approach systems, applications, and operations with risk reduction in mind.</span></li><li style="color:rgb(0,0,0);margin:0pt 0px;font-size:11pt;line-height:1.38;letter-spacing:0.25px;"><b><strong style="color:rgb(0,0,0);font-size:11pt;white-space:pre-wrap;">Investigative</strong></b><span style="color:rgb(0,0,0);font-size:11pt;white-space:pre-wrap;"> – You enjoy digging into alerts, logs, and unusual behavior to understand what happened and why.</span></li><li style="color:rgb(0,0,0);margin:0pt 0px;font-size:11pt;line-height:1.38;letter-spacing:0.25px;"><b><strong style="color:rgb(0,0,0);font-size:11pt;white-space:pre-wrap;">Ownership-focused</strong></b><span style="color:rgb(0,0,0);font-size:11pt;white-space:pre-wrap;"> – You follow findings and incidents through resolution instead of simply handing them off.</span></li><li style="color:rgb(0,0,0);margin:0pt 0px;font-size:11pt;line-height:1.38;letter-spacing:0.25px;"><b><strong style="color:rgb(0,0,0);font-size:11pt;white-space:pre-wrap;">Collaborative</strong></b><span style="color:rgb(0,0,0);font-size:11pt;white-space:pre-wrap;"> – You work effectively with DevOps, Systems Operations, Engineering, and external security partners.</span></li><li style="color:rgb(0,0,0);margin:0pt 0px;font-size:11pt;line-height:1.38;letter-spacing:0.25px;"><b><strong style="color:rgb(0,0,0);font-size:11pt;white-space:pre-wrap;">Automation-oriented</strong></b><span style="color:rgb(0,0,0);font-size:11pt;white-space:pre-wrap;"> – You look for opportunities to reduce repetitive security work through scripting and integrations.</span></li><li style="color:rgb(0,0,0);margin:0pt 0px;font-size:11pt;line-height:1.38;letter-spacing:0.25px;"><b><strong style="color:rgb(0,0,0);font-size:11pt;white-space:pre-wrap;">Strong communicator</strong></b><span style="color:rgb(0,0,0);font-size:11pt;white-space:pre-wrap;"> – You can clearly explain risk, findings, and remediation requirements to technical and non-technical stakeholders.</span></li><li style="color:rgb(0,0,0);margin:0pt 0px;font-size:11pt;line-height:1.38;letter-spacing:0.25px;"><b><strong style="color:rgb(0,0,0);font-size:11pt;white-space:pre-wrap;">Self-starter</strong></b><span style="color:rgb(0,0,0);font-size:11pt;white-space:pre-wrap;"> – You can work independently, prioritize effectively, and manage multiple security initiatives at once.</span></li></ul><p style='font-family:"Basel Grotesk",Arial,sans-serif;font-size:11pt;font-weight:400;line-height:1.38;letter-spacing:0.25px;margin:12pt 0px;padding:0px;'><b><strong style="color:rgb(0,0,0);font-size:12pt;white-space:pre-wrap;"> Your Background</strong></b></p><ul style='font-family:"Basel Grotesk",Arial,sans-serif;font-size:11pt;font-weight:400;margin:8px 0px;line-height:1.6;padding:0px 0px 0px 32px;list-style-type:disc;'><li style="color:rgb(0,0,0);margin:0pt 0px;font-size:11pt;line-height:1.38;letter-spacing:0.25px;"><span style="color:rgb(0,0,0);font-size:11pt;white-space:pre-wrap;">3-6 years of experience in Security Engineering, Security Operations, Cloud Security, or a closely related role.</span></li><li style="color:rgb(0,0,0);margin:0pt 0px;font-size:11pt;line-height:1.38;letter-spacing:0.25px;"><span style="color:rgb(0,0,0);font-size:11pt;white-space:pre-wrap;">Hands-on experience administering an endpoint detection and response (EDR) platform and working with a managed detection and response (MDR) provider.</span></li><li style="color:rgb(0,0,0);margin:0pt 0px;font-size:11pt;line-height:1.38;letter-spacing:0.25px;"><span style="color:rgb(0,0,0);font-size:11pt;white-space:pre-wrap;">Experience operating or tuning a SIEM, investigating security alerts, and onboarding new log sources.</span></li><li style="color:rgb(0,0,0);margin:0pt 0px;font-size:11pt;line-height:1.38;letter-spacing:0.25px;"><span style="color:rgb(0,0,0);font-size:11pt;white-space:pre-wrap;">Strong experience managing vulnerabilities from discovery through prioritization, remediation, validation, and closure.</span></li><li style="color:rgb(0,0,0);margin:0pt 0px;font-size:11pt;line-height:1.38;letter-spacing:0.25px;"><span style="color:rgb(0,0,0);font-size:11pt;white-space:pre-wrap;">Experience with SAST, DAST, software composition analysis, dependency scanning, secrets detection, and application security tooling.</span></li><li style="color:rgb(0,0,0);margin:0pt 0px;font-size:11pt;line-height:1.38;letter-spacing:0.25px;"><span style="color:rgb(0,0,0);font-size:11pt;white-space:pre-wrap;">Practical AWS security experience, including IAM, logging, networking, and cloud configuration review.</span></li><li style="color:rgb(0,0,0);margin:0pt 0px;font-size:11pt;line-height:1.38;letter-spacing:0.25px;"><span style="color:rgb(0,0,0);font-size:11pt;white-space:pre-wrap;">Experience supporting security investigations, incident containment, root cause analysis, and remediation coordination.</span></li><li style="color:rgb(0,0,0);margin:0pt 0px;font-size:11pt;line-height:1.38;letter-spacing:0.25px;"><span style="color:rgb(0,0,0);font-size:11pt;white-space:pre-wrap;">Experience with Cloudflare, Zero Trust technologies, WAF, or similar edge security platforms is preferred.</span></li><li style="color:rgb(0,0,0);margin:0pt 0px;font-size:11pt;line-height:1.38;letter-spacing:0.25px;"><span style="color:rgb(0,0,0);font-size:11pt;white-space:pre-wrap;">Experience administering security awareness and phishing simulation platforms such as KnowBe4.</span></li><li style="color:rgb(0,0,0);margin:0pt 0px;font-size:11pt;line-height:1.38;letter-spacing:0.25px;"><span style="color:rgb(0,0,0);font-size:11pt;white-space:pre-wrap;">Proficiency with Python, Bash, APIs, or similar technologies for security automation, integrations, and reporting.</span></li><li style="color:rgb(0,0,0);margin:0pt 0px;font-size:11pt;line-height:1.38;letter-spacing:0.25px;"><span style="color:rgb(0,0,0);font-size:11pt;white-space:pre-wrap;">Ability to clearly communicate technical security risk and remediation requirements to Engineering, DevOps, Systems Operations, and other stakeholders.</span></li><li style="color:rgb(0,0,0);margin:0pt 0px;font-size:11pt;line-height:1.38;letter-spacing:0.25px;"><span style="color:rgb(0,0,0);font-size:11pt;white-space:pre-wrap;">Familiarity with SOC 2, ISO 27001, and HIPAA compliance requirements, with experience coordinating penetration tests, vulnerability rescans, or third-party security assessments.</span></li><li style="color:rgb(0,0,0);margin:0pt 0px;font-size:11pt;line-height:1.38;letter-spacing:0.25px;"><span style="color:rgb(0,0,0);font-size:11pt;white-space:pre-wrap;">HITRUST experience is a plus.</span></li></ul><p style='font-family:"Basel Grotesk",Arial,sans-serif;font-size:11pt;font-weight:400;line-height:1.38;letter-spacing:0.25px;margin:12pt 0px;padding:0px;'><span style="color:rgb(0,0,0);font-size:11pt;white-space:pre-wrap;"> </span></p><p style='font-family:"Basel Grotesk",Arial,sans-serif;font-size:11pt;font-weight:400;line-height:1.38;letter-spacing:0.25px;margin:0pt 0px;padding:0px;'><b><strong style="color:rgb(0,0,0);font-size:14pt;white-space:pre-wrap;">What We Offer</strong></b></p><ul style='font-family:"Basel Grotesk",Arial,sans-serif;font-size:11pt;font-weight:400;margin:8px 0px;line-height:1.6;padding:0px 0px 0px 32px;list-style-type:disc;'><li style="color:rgb(0,0,0);margin:12pt 0px 0pt;font-size:11pt;line-height:1.38;--listitem-marker-color:#000000;letter-spacing:0.25px;"><b><strong style="color:rgb(0,0,0);font-size:11pt;white-space:pre-wrap;">Competitive Salary:  </strong></b><span style="color:rgb(0,0,0);font-size:11pt;white-space:pre-wrap;">We offer a competitive salary commensurate with experience and qualifications. This role is budgeted in the range of $125,000-$155,000 DOE.</span></li><li style="color:rgb(0,0,0);margin:0pt 0px;font-size:11pt;line-height:1.38;letter-spacing:0.25px;"><b><strong style="color:rgb(0,0,0);font-size:11pt;white-space:pre-wrap;">Comprehensive Benefits Package: </strong></b><span style="color:rgb(0,0,0);font-size:11pt;white-space:pre-wrap;">Our benefits package includes 75% subsidized health insurance, dental insurance, vision insurance, paid time off, and a 401(k) retirement savings plan with company match.</span></li><li style="color:rgb(0,0,0);margin:0pt 0px;font-size:11pt;line-height:1.38;letter-spacing:0.25px;"><b><strong style="color:rgb(0,0,0);font-size:11pt;white-space:pre-wrap;">Professional Development Opportunities:</strong></b><span style="color:rgb(0,0,0);font-size:11pt;white-space:pre-wrap;">  We are committed to investing in our employees' professional development and offer a variety of on-the-job training and development opportunities.</span></li><li style="color:rgb(0,0,0);margin:0pt 0px;font-size:11pt;line-height:1.38;letter-spacing:0.25px;"><b><strong style="color:rgb(0,0,0);font-size:11pt;white-space:pre-wrap;">Flexible Work Arrangements:  </strong></b><span style="color:rgb(0,0,0);font-size:11pt;white-space:pre-wrap;">We are a fully remote team who collaborate both synchronously and asynchronously to achieve the best outcomes.</span></li><li style="color:rgb(0,0,0);margin:0pt 0px;font-size:11pt;line-height:1.38;letter-spacing:0.25px;"><b><strong style="color:rgb(0,0,0);font-size:11pt;white-space:pre-wrap;">Direct Engagement with Customers and Executives: </strong></b><span style="color:rgb(0,0,0);font-size:11pt;white-space:pre-wrap;">We are a lean organization and this role will work directly with executives and customers on high-impact initiatives, balancing strategic alignment with day-to-day execution.</span></li><li style="color:rgb(0,0,0);margin:0pt 0px 12pt;font-size:11pt;line-height:1.38;letter-spacing:0.25px;"><b><strong style="color:rgb(0,0,0);font-size:11pt;white-space:pre-wrap;">Collaborative and Supportive Work Environment:  </strong></b><span style="color:rgb(0,0,0);font-size:11pt;white-space:pre-wrap;">We foster a collaborative and supportive work environment where employees are encouraged to share ideas and contribute to the company's success.</span></li></ul></body></div>

We use cookies to improve your experience and analyze site traffic. By clicking "Accept", you agree to our use of cookies as described in our Privacy Policy.