Senior/Staff Security Engineer, Detection & Response

About NexHealth

Our healthcare system is frustratingly analog. When you live in a world of one-tap car rides, meal delivery, and unlimited streaming, why do you have to call to schedule an appointment with a doctor and are still handed a clipboard to fill in a form? NexHealth’s mission is to accelerate innovation in healthcare. We’re doing this by connecting patients, doctors, and developers. We’re the first to fully automate the integration with health record systems, paving the way for a new generation of disruptive health-tech companies

Here's some of what we've accomplished:

1. $125M Series C at $1B valuation
2. Manage more than 75 million patient records
3. 80%+ annual revenue growth
4. Top 10% of Inc. 5000 (2022)

Security at NexHealth

Joining the security team at NexHealth means becoming a crucial part of a mission to accelerate innovation in healthcare. You'll play a vital role in securing customer data and safeguarding our platforms, ensuring the integrity of the advancements we bring to the industry. This is an opportunity to expand your expertise in various security domains, continuously learning and adapting as you help protect the future of healthcare.

What You’ll Do:

• Identify essential detections, necessary logs, log sources, attributes, and platforms to write high value detection rules.
• Define, develop, test, and refine alerting rules to minimize false positives and improve our signal-to-noise ratio, ensuring our detection systems are both efficient and effective.
• Streamline response processes by creating detailed Incident Response (IR) runbooks and developing Security Orchestration, Automation, and Response (SOAR) capabilities to reduce manual intervention and enhance response times.
• Improve detection coverage and accuracy across all monitored systems and applications.
• Facilitate security incident response in a collaborative, cross-functional setting, and lead to the resolution from threats originating both internally and externally.
• Adapt, learn and grow to become a contributor across various areas of security within the broader team.

What You’ll Bring:

• 6+ years of experience working on a Security team focused on building detection platforms, writing detections and automating responses.
• Experience with AWS cloud infrastructure, databases, data warehouses, and web applications; familiarity with SIEM tools is a plus.
• Proficient in scripting languages (e.g., Python) and SQL.
• Strong understanding of modern adversary TTPs (Tactics, Techniques, and Procedures).
• Demonstrated ability to collaborate effectively with colleagues, manage and execute tasks, and prioritize efforts to mitigate risks.

NexHealth Values

• Solve the customer’s problems, not yours
  When making decisions, think from the perspective of the customer. It’s easy to make decisions that make our lives simpler, but not the customers.
• Do the things others are not willing to do
  As a Nexer, always go after the hardest problems. Pursue things at the highest quality. Move at the fastest pace. 
• Take ownership
  Act like a founder. Own your roles, destinies, mistakes, behavior, and our mission. The buck stops with each of us - no blaming or excuses.
• Say what’s on your mind, with positive intent
  Be direct, proactive, transparent, and frequent in your communication. 
• Default trust
  As a Nexer, you do not have to earn trust, trust is given to you by default. If we by default trust each other, our speed of communication, feedback, information sharing, and overall improvements will be a lot faster.
• Think in first principles
  We first identify the problem and then break it down to its fundamentals before diving into solutions. We constantly ask “why” to validate our assumptions.

Here’s a glimpse into our interview process:

• You’ll talk with a NexHeath Recruiter 
• You’ll talk with the Hiring Manager on a video call 
• You’ll talk with Team Members on a video call
• You’ll do a Panel Presentation or Working Session with a small panel