{"id":3236130,"url":"https://alion.io/job/american-oncology-network-llc-lead-security-engineer","title":"Lead Security Engineer","company":{"id":3865580,"name":"American Oncology Network, LLC","domain":"aoncology.com","url":"https://alion.io/company/aoncology","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":null,"truth_index":null},"role":"Security","role_family":"Security","seniority":"lead","employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"posting_text","remote_working_hours":null,"hiring_geo_confidence":"inferred","locations":[],"countries":[],"hiring_countries":["US"],"hiring_countries_total":1,"salary":{"min":104200,"max":155800,"currency":"USD","period":"year","gross":null,"usd_annual":155800},"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Azure","optional":false},{"name":"HIPAA","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"NIST CSF","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"SIEM","optional":false},{"name":"Delinea","optional":true}],"status":"live","first_seen_at":"2026-10-25T11:45:27Z","employer_posted_date":null,"last_verified_at":"2026-10-25T11:45:27Z","board_verified":false,"closed_at":null,"days_open":5,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":5},"description":"This a Full Remote job, the offer is available from: United States\nLocation:\nRemote PositionHiring Range:\n$104,200.00 - $155,800.00Position Summary\nThe Lead Security Engineer provides hands-on technical leadership for American Oncology Network’s enterprise security program, overseeing security tools, configurations, monitoring, vulnerability management, incident response, and managed security service partners across a distributed healthcare environment. Reporting to the Director of IT Security, this role leads and develops a team of three security staff, strengthens the protection of patient information and clinical operations, and drives consistent security practices across AON locations.\nKey Performance Areas\nKPA 1: Security Engineering, Tools and Infrastructure\nOwn and administer the security technology stack, including SIEM/SOAR, endpoint protection, email security, privileged access management, and secure network access.\nMaintain and optimize Rapid7 InsightIDR, InsightVM and InsightConnect, Bitdefender GravityZone, Mimecast, Delinea Secret Server, and Cato security configurations and coverage.\nSecure Microsoft 365, Azure and other cloud/SaaS environments by establishing configuration baselines and monitoring security posture.\nManage security tool licensing, coverage, and renewal inputs to maintain appropriate protection and cost-effective utilization.\nKPA 2: Threat Detection, Incident Response and Vulnerability Management\nLead security event triage and incident investigations in partnership with the managed detection and response provider; coordinate containment, recovery, and post-incident reviews.\nOversee vulnerability scanning, prioritization, remediation, and patch management across endpoints, servers, cloud platforms, and network infrastructure.\nDocument risks associated with legacy systems and validate compensating controls where timely remediation is not feasible.\nDevelop response runbooks, technical standards, and repeatable procedures to support consistent security operations.\nKPA 3: Identity, Access and Security Risk Compliance\nStrengthen identity and access security through multifactor authentication, conditional access, privileged access management, joiner/mover/leaver controls, and periodic access reviews.\nCoordinate annual HIPAA- and NIST-aligned security risk assessments, vulnerability assessments, and penetration tests with external assessment partners.\nTrack and drive remediation of assessment findings and security gaps, communicating technical risks and priorities to stakeholders.\nAssess security risks arising from third-party vendors, integrations, newly onboarded sites, and acquired practices.\nKPA 4: Vendor and Managed Security Partner Oversight\nServe as the technical lead and primary day-to-day accountability point for managed service and security partners, including ATG and Rapid7 MDR.\nValidate provider deliverables, service quality, investigation work, and adherence to contractual service-level agreements.\nEscalate gaps and coordinate corrective action with internal IT stakeholders and external partners.\nPromote clear documentation, ownership, and communication across security operations and partner workflows.\nKPA 5: Team Leadership and Operational Improvement\nLead, mentor, and develop security staff by establishing priorities, reviewing deliverable quality, and building technical capabilities.\nProvide practical guidance during complex security investigations, remediation activities, and operational issues.\nIdentify opportunities to improve security workflows through PowerShell, Python, and other scripting or automation methods.\nCommunicate security risks, operational priorities, and remediation progress clearly to nontechnical leaders and clinical stakeholders.\nPosition Qualifications\nEducation\n· Bachelor’s degree in information security, Computer Science or related field preferred.\nMinimum Relevant Experience\n· 8+ years of information security or security engineering experience, including hands-on operation of production security tools.\n· 2+ years leading or mentoring security staff.\n· Experience overseeing MSP, MSSP, or MDR providers; leading security investigations; and administering SIEM/XDR and vulnerability management technologies.\n· Knowledge of HIPAA, HITECH, and healthcare security frameworks (HITRUST, NIST CSF).\n· Practical experience with endpoint, email, network, cloud, and privileged access security, including Microsoft 365, Azure, Entra ID, Rapid7 InsightIDR and InsightVM.\n· Preferred: Healthcare or multisite provider experience, EHR familiarity (e.g., OncoEMR), and M&A or new-site security integration.\nCertifications/Licenses\n· Preferred: CISSP, GIAC (GCIH, GCIA, GSEC), CCSP, or Microsoft security certifications.\nSkills\n· Security Engineering\n· Incident Response\n· Vulnerability Management\n· Identity and Access Management\n· Cloud Security\n· Vendor Oversight\n· Security Compliance\n· Team Leadership\n· Scripting and Automation (PowerShell/Python)\n· Technical Risk Communication\nTravel: 0-25%\nExpectations for All Employees\nThis position description reflects the general duties and responsibilities necessary to perform the principal functions of the job, as identified, and shall not be considered an exhaustive list of job responsibilities which may be inherent in the job. To perform this job successfully, an individual must be able to perform each essential duty satisfactorily. The requirements listed are representative of the knowledge, skill, and/or ability required. The responsibilities listed may be subject to change at any time and individuals may be asked to perform duties outside of their regular responsibilities to support the ongoing business operation needs.\nAmericans with Disabilities Act (ADA) Compliance\nThe essential functions described herein are intended to define the fundamental duties of the position and serve as the minimum requirements for performance. They do not represent an exhaustive list of all job duties that may be required. AON complies with the Americans with Disabilities Act (ADA) and applicable state and local laws. The Company will engage in an interactive process to evaluate and, where appropriate, provide reasonable accommodations to qualified individuals with disabilities, provided such accommodations do not impose an undue hardship on the business.\nPhysical Requirements\n· Sitting\n· Keyboard use\n· Minimal lifting\n· Long screen exposure\nCognitive Requirements\n· Time management\n· Effective written/verbal communication\n· Policy interpretation\nEnvironmental Requirements\n· Home office setup\n· Minimal external environmental exposure\nAccommodation Notes\n· Flexible hours\n· Ergonomic home office guidance\n· Communication software accessibility","description_format":"text","description_chars":6728,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["Home office"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Health Care","Cancer Care Centers","Care Coordination & Population Health"],"lifecycle":[{"event":"open","at":"2026-10-25T11:45:27Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":4,"expected_fill_days":28,"reasons":["seen:4","win:early"],"computed_at":"2026-10-30T05:48:23Z"},"pay":{"stated_usd_annual":155800,"is_top_pay":false},"html_url":"https://alion.io/job/american-oncology-network-llc-lead-security-engineer","json_url":"https://alion.io/job/american-oncology-network-llc-lead-security-engineer.json","meta":{"generated_at":"2026-10-30T16:39:10Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":4834,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-31T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":3865580},"rest":"https://alion.io/mcp/rest/get_company?id=3865580"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Famerican-oncology-network-llc-lead-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Famerican-oncology-network-llc-lead-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Famerican-oncology-network-llc-lead-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/american-oncology-network-llc-lead-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Famerican-oncology-network-llc-lead-security-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3236130}},{"tool":"search_jobs","arguments":{"company":"aoncology.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3236130},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}