Skip to content
CV Rocket
Get started
How it worksThe enginePricingBlogContactSign in

Open nowPosted 17 days ago

Security Operations Engineer

DeepHealth41 open roles

Pay
$110 – $120 an hour
Where
Remote job, Remote
Work mode
Remote
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowSecurity Operations EngineerDeepHealth · Remote job, Remote

  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on DeepHealth's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

12.3% of postings close within 7 days. Measured by our own scanner across the market. DeepHealth postings stay open a median of 41 days.

Share of postings closed within
  1. 2.1%1 day
  2. 4.5%3 days
  3. 12.3%7 days
  4. 19.3%14 days
  5. 35.6%30 days
  6. 57.8%60 days
This job: posted 17 days ago

DeepHealth median: 41 days open

The posting

The Security Operations Engineer builds and operates security controls, tooling, and automation across DeepHealth's cloud and corporate environments. This role is responsible for configuring, integrating, and maintaining the enterprise security tooling stack, developing detection content, and automating security operations tasks so that controls are repeatable, version-controlled, and auditable.

Working within DeepHealth's established security frameworks and under the direction of the Director, Security Operations, this position operates and tunes security controls, detection content, and guardrails. Independent validation of those controls sits with the security operations watch function — a deliberate separation that keeps the control environment defensible under audit. Remediation follows system ownership across Cloud Operations, Platform, and Application Development; this role supplies technical guidance and implements fixes directly where the control is security-owned.

This position operates within a regulated healthcare environment across a global operating footprint, with obligations under HIPAA, ISO/IEC 27001, and SOC 2. The role reports to the Director, Security Operations, with future reporting to the Manager, Security Operations as that position is established.

· Build, configure, integrate, and tune the enterprise security tooling stack across cloud and corporate environments.

· Develop and maintain detection content, correlation rules, and response automation within the SIEM and SOAR platform.

· Onboard new log sources and telemetry feeds, validating ingestion completeness, parsing accuracy, and field normalization.

· Administer and tune endpoint detection and response tooling, including policy configuration, exclusion governance, and coverage validation.

· Integrate security tooling with adjacent platforms through APIs to reduce manual handling and improve data quality.

· Implement and maintain security configurations, guardrails, and baselines across Google Cloud Platform, Amazon Web Services, and Microsoft Azure.

· Build and maintain security automation and infrastructure-as-code using Terraform or an equivalent framework, so that controls are version-controlled, repeatable, and auditable.

· Implement policy-as-code and preventive guardrails using native cloud policy engines or an equivalent open policy framework.

· Support cloud security posture management across all cloud environments, including finding deduplication, theme mapping, and routing to owning teams.

· Harden cloud resources including compute, storage, database, container, and serverless services against established benchmarks.

· Configure and maintain Microsoft 365 and Entra ID security controls, including conditional access, identity protection, and Defender workloads in a hybrid directory environment.

· Implement and maintain least-privilege access models, roles, and policies across multiple cloud identity systems.

· Implement container and Kubernetes security controls, including role-based access control, workload security standards, image scanning, and runtime protection.

· Implement and maintain secrets management practices and tooling, and support the elimination of hard-coded credentials across environments.

· Operate vulnerability management tooling, validate scan coverage, and translate raw scanner output into prioritized, owner-routed findings.

· Provide technical remediation guidance to cloud, platform, identity, application, and endpoint owners, who retain accountability for closure of findings in their systems.

· Implement engineering fixes for findings that fall to security-owned tooling and configuration.

· Support remediation tracking for penetration test and vulnerability assessment findings by supplying technical detail and validating that fixes are technically sound.

· Support incident detection and response through hands-on technical investigation, including log analysis, endpoint examination, identity and authentication tracing, and cloud audit log review.

· Support escalations raised by the external managed security partner by supplying technical analysis and environment context.

· Provide feedback into detection quality and alert tuning to reduce noise and improve signal for the monitoring function.

· Contribute technical findings to post-incident review, and implement the resulting control and detection improvements.

· Participate in tabletop exercises and resilience testing, and act on the technical gaps those exercises surface.

· Document all engineering changes to security controls through the change management process, including validation criteria and rollback plans.

· Produce and maintain runbooks, playbooks, and technical operating procedures for repeatable security operations tasks.

· Write clear, documented, and reviewable code and configuration so that work can be inspected, maintained, and handed over without dependence on any one individual.

· Support audit, certification, and customer assurance activities by producing technical evidence on request.

· Maintain accurate inventory of security tooling, control coverage, licensing position, and control operating status.

· Maintain strict confidentiality of security testing results, control configuration detail, and investigative material, and follow established standards for external disclosure.

PLEASE NOTE: This is not an exhaustive list of all duties, responsibilities and requirements of the position described above. Other functions may be assigned and management retains the right to add or change duties at any time.

Minimum Qualifications, Education and Experience

· 4+ years of hands-on experience in security operations, security engineering, or a comparable technical security role. (Required)

· Bachelor's degree in information technology, computer science, cybersecurity, or a related field, or equivalent professional experience. (Required)

· 2+ years of hands-on cloud security experience across at least one major cloud provider; Google Cloud Platform and Amazon Web Services preferred. (Required)

· 2+ years operating and tuning a SIEM platform, including working with detection content and log sources. (Required)

· 1+ year administering Microsoft 365 and Entra ID security controls in a hybrid directory environment. (Required)

· Working knowledge of security automation; experience with scripting and infrastructure-as-code is required, with Terraform experience preferred. (Required)

· Working knowledge of cloud security posture management and preventive controls. (Required)

· Working knowledge of container and Kubernetes security, including role-based access control and image scanning. (Required)

· Working knowledge of secrets management tooling and practices. (Required)

· Practical experience with endpoint detection and response tooling. (Required)

· Working knowledge of vulnerability management and the finding remediation lifecycle, including risk-based prioritization. (Required)

· Scripting capability in at least one of: Python, PowerShell, or Bash. (Required)

· Familiarity with recognized security frameworks including NIST Cybersecurity Framework, ISO/IEC 27001, and SOC 2. (Required)

· Able to communicate technical findings clearly in writing and verbally to both technical and non-technical audiences. (Required)

· Able to manage assigned work independently and escalate appropriately. (Required)

· Available to support incident response activity outside standard business hours as required. (Required)

· Microsoft Office experience. (Required)

· Industry certification such as Security+, CompTIA CySA+, or a cloud provider security certification. (Preferred)

· Experience in healthcare, medical device, or another regulated industry, and working familiarity with HIPAA obligations. (Preferred)

· Experience working alongside or integrating with a managed security service provider. (Preferred)

Quality Standards

· Communicates, cooperates, and consistently functions professionally and harmoniously with all levels of supervision, co-workers, visitors, and vendors.

· Demonstrates initiative, personal awareness, professionalism and integrity, and exercises confidentiality in all areas of performance.

· Follows all local, regional and country laws concerning employment.

· Follows all DeepHealth policies and procedures.

· Follows data privacy, compliance, safety and confidentiality standards at all times.

· Practices universal safety precautions.

· Promotes good public relations on the phone and in person.

· Adapts and is willing to learn new tasks, methods, and systems.

· Reports to work regularly as scheduled; consistently punctual with respect to working hours, meal and rest breaks, and maintains satisfactory personal attendance in accordance with DeepHealth guidelines.

· Completes job responsibilities in a quality and timely manner.

Travel

This position requires domestic / international travel up to 10%.

Working Environment

Remote

Work Authorization / Visa Sponsorship: DeepHealth does not provide immigration sponsorship for this position, including sponsorship for employment-based visas or other work authorization requiring employer sponsorship. Candidates must be legally authorized to work in the United States without current or future sponsorship from DeepHealth for the duration of employment.

Salary:

Dependent upon experience: 110,000-120,000 USD

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against DeepHealth's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.

  3. We apply on DeepHealth's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.

  4. Every reply, sorted

    DeepHealth's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.

  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

Get the CV for this job
By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.