{"id":3355118,"url":"https://alion.io/job/md-integrations-security-engineer","title":"Security Engineer","company":{"id":680182,"name":"MD Integrations","domain":"mdintegrations.com","url":"https://alion.io/company/mdintegrations","size_band":"51-200","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Rippling","truth_index":null},"role":"Security","role_family":"Security","seniority":"middle","employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"board_field","remote_working_hours":null,"hiring_geo_confidence":"structured","locations":[],"countries":[],"hiring_countries":["US"],"hiring_countries_total":1,"salary":{"min":125000,"max":155000,"currency":"USD","period":"year","gross":null,"usd_annual":155000},"salary_estimate":null,"experience_years_min":3,"visa_sponsorship":true,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Cloudflare","optional":false},{"name":"Crowdstrike","optional":false},{"name":"Dependabot","optional":false},{"name":"HIPAA","optional":false},{"name":"IAM","optional":false},{"name":"ISO 27001","optional":false},{"name":"Python","optional":false},{"name":"SIEM","optional":false},{"name":"SOC 2","optional":false},{"name":"Zero Trust","optional":false}],"status":"live","first_seen_at":"2026-10-22T20:39:00Z","employer_posted_date":"2026-10-22","last_verified_at":"2026-10-31T15:51:20Z","board_verified":true,"closed_at":null,"days_open":8,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":8},"description":"About MD Integrations\nAt MD Integrations, we partner with digital health brands to power clinical care at scale. We specialize in men's and women’s health, dermatology, endocrinology, and weight management, offering telehealth solutions that help patients receive expert, personalized care-all from the comfort of their home. Join our team and be part of the movement to make specialty care more accessible and impactful.\nMD Integrations is an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all employees. We are unable to support US visa sponsorship at this time.\nOverview\nMD Integrations (MDI) is seeking a Security Engineer to help protect our cloud infrastructure, applications, endpoints, and users. This role will focus on security operations, vulnerability management, incident response, application security, and administration of key security platforms across our environment.\nThe ideal candidate is a hands-on security generalist who can identify risk, investigate security events, own findings through remediation, and work closely with Systems Operations, DevOps, and Engineering teams to ensure issues are resolved appropriately. Security will generally own the finding, prioritization, coordination, and validation, while the team responsible for the affected system will own implementation of the remediation.\nThis position reports directly to the Sr. Director, Systems Operations and is fully remote. Availability during and after core business hours may be required as business needs dictate.\nWhat You’ll Be Accountable For\nSecurity Operations & Incident Response\nMonitor and investigate security alerts across CrowdStrike Falcon Complete, CrowdStrike Next-Gen SIEM, Cloudflare, AWS, and other security platforms. Serve as the internal owner for CrowdStrike Falcon Complete, including policy management, escalation review, response coordination, containment validation, integrations, and coordination with the MDR provider.\nActively participate in incident response, including investigation, containment, root cause analysis, remediation coordination, and post-incident follow-up. Execute approved containment actions such as endpoint isolation, credential or account remediation, indicator blocking, and access-control changes.\nOwn and tune SIEM alerts, detections, integrations, and workflows, and work with DevOps and Systems teams to onboard additional log and telemetry sources.\n\nVulnerability & Application Security\nOwn the vulnerability management lifecycle from identification through prioritization, SLA tracking, remediation coordination, rescanning, validation, and closure.\nManage findings from Dependabot, SAST, DAST, software composition analysis, secrets detection, penetration testing, cloud security reviews, and other vulnerability sources while working closely with Engineering on remediation.\nCoordinate external penetration testing and rescans while performing internal security assessments and validation where appropriate.\n\nEndpoint, Cloud & Zero Trust Security\nOwn CrowdStrike endpoint security operations, including policy management, alert investigation, endpoint security posture, and remediation coordination.\nReview AWS security posture, IAM permissions, network security controls, and cloud configurations to identify weaknesses and provide prescriptive remediation guidance.\nSupport Cloudflare Zero Trust and security policies, including access controls, web content filtering, suspicious activity investigation, and policy review.\n\nSecurity Platforms, Awareness & Automation\nOwn and administer security platforms including CrowdStrike, KnowBe4, SIEM, SAST/DAST, and other security technologies.\nManage KnowBe4 phishing simulations, security awareness training, reporting, and follow-up activities.\nAutomate recurring security tasks, integrations, and reporting using Python, Bash, APIs, or similar technologies.\n\nCompliance & Security Governance\nImplement, operate, and maintain technical security controls that support the organization’s SOC 2, ISO 27001, HIPAA, and other applicable compliance obligations.\nSupport technical control remediation, validation, and documentation needed for audits and internal reviews.\nHelp evaluate new security technologies and provide recommendations based on security, operational, and business requirements.\n\nYour Work DNA\nSecurity-minded - You approach systems, applications, and operations with risk reduction in mind.\nInvestigative - You enjoy digging into alerts, logs, and unusual behavior to understand what happened and why.\nOwnership-focused - You follow findings and incidents through resolution instead of simply handing them off.\nCollaborative - You work effectively with DevOps, Systems Operations, Engineering, and external security partners.\nAutomation-oriented - You look for opportunities to reduce repetitive security work through scripting and integrations.\nStrong communicator - You can clearly explain risk, findings, and remediation requirements to technical and non-technical stakeholders.\nSelf-starter - You can work independently, prioritize effectively, and manage multiple security initiatives at once.\nYour Background\n3-6 years of experience in Security Engineering, Security Operations, Cloud Security, or a closely related role.\nHands-on experience administering an endpoint detection and response (EDR) platform and working with a managed detection and response (MDR) provider.\nExperience operating or tuning a SIEM, investigating security alerts, and onboarding new log sources.\nStrong experience managing vulnerabilities from discovery through prioritization, remediation, validation, and closure.\nExperience with SAST, DAST, software composition analysis, dependency scanning, secrets detection, and application security tooling.\nPractical AWS security experience, including IAM, logging, networking, and cloud configuration review.\nExperience supporting security investigations, incident containment, root cause analysis, and remediation coordination.\nExperience with Cloudflare, Zero Trust technologies, WAF, or similar edge security platforms is preferred.\nExperience administering security awareness and phishing simulation platforms such as KnowBe4.\nProficiency with Python, Bash, APIs, or similar technologies for security automation, integrations, and reporting.\nAbility to clearly communicate technical security risk and remediation requirements to Engineering, DevOps, Systems Operations, and other stakeholders.\nFamiliarity with SOC 2, ISO 27001, and HIPAA compliance requirements, with experience coordinating penetration tests, vulnerability rescans, or third-party security assessments.\nHITRUST experience is a plus.\nWhat We Offer\nCompetitive Salary: We offer a competitive salary commensurate with experience and qualifications. This role is budgeted in the range of $125,000-$155,000 DOE.\nComprehensive Benefits Package: Our benefits package includes 75% subsidized health insurance, dental insurance, vision insurance, paid time off, and a 401(k) retirement savings plan with company match.\nProfessional Development Opportunities: We are committed to investing in our employees' professional development and offer a variety of on-the-job training and development opportunities.\nFlexible Work Arrangements: We are a fully remote team who collaborate both synchronously and asynchronously to achieve the best outcomes.\nDirect Engagement with Customers and Executives: We are a lean organization and this role will work directly with executives and customers on high-impact initiatives, balancing strategic alignment with day-to-day execution.\nCollaborative and Supportive Work Environment: We foster a collaborative and supportive work environment where employees are encouraged to share ideas and contribute to the company's success.","description_format":"text","description_chars":7830,"description_truncated":false,"requirements":{"experience_years_min":3,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Dental insurance","Flexible schedule","Health insurance","Professional development","Retirement plans","Vision insurance"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Telemedicine & Virtual Care"],"lifecycle":[{"event":"open","at":"2026-10-27T19:45:08Z"}],"visa":[{"country":"US","licensed_sponsor":true,"evidence":"H-1B filings in 12 months: 1","filings_12m":1,"filings_prev_12m":0,"green_card_filings_12m":0,"median_offered_wage_usd":262500,"route":null,"cap_exempt":false,"checked_at":"2026-10-29T16:27:21+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)"],"filings_for_role_12m":0}],"liveness":{"score":84,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.844,"p_room":1,"age_days":8,"expected_fill_days":36,"reasons":["conf:1","win:early"],"computed_at":"2026-10-31T05:58:55Z"},"pay":{"stated_usd_annual":155000,"is_top_pay":true},"html_url":"https://alion.io/job/md-integrations-security-engineer","json_url":"https://alion.io/job/md-integrations-security-engineer.json","meta":{"generated_at":"2026-10-31T15:56:22Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":24865,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-01T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":680182},"rest":"https://alion.io/mcp/rest/get_company?id=680182"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fmd-integrations-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fmd-integrations-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fmd-integrations-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/md-integrations-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fmd-integrations-security-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3355118}},{"tool":"search_jobs","arguments":{"company":"mdintegrations.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3355118},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}