Information Security Engineer (IS Engr I) - REMOTE

Information Security EngineerBelong. Thrive. Make a Difference.Are you looking for a meaningful and satisfying career where you have endless opportunities to grow and be financially rewarded? Net Health may be the perfect place for you.A high-growth and profitable company, we help caregivers harness data for human health. We honor and respect the needs of our Net Health family and staff, which is why we offer a work-from-anywhere environment and unlimited PTO. Our welcoming and collaborative culture paired with progressive benefits makes Net Health the ultimate career home!As a leading-edge SaaS company in healthcare, we deliver solutions that help patients get better, faster, and live more fulfilling lives. Our software and predictive analytics cover the continuum of care, from hospital-to-home, across various medical specialties. Come join us and start the next chapter of your exciting career while helping others to live better lives.JOB OVERVIEWWe're hiring an Information Security Engineer to help close out the engineering work on our security roadmap. You'll take on cloud security projects in Azure as they come up, drive vulnerability remediation alongside our development teams, secure our AI projects, and serve on-call through CrowdStrike Falcon Complete. You'll also apply a security lens to new projects through vendor reviews and risk assessments and help us get ahead of post-quantum cryptography readiness before it becomes urgent.The work is varied. In a given month you might be implementing a new control in Azure, sitting with a dev team to close a critical CVE, reviewing an MCP server before it goes live, assessing a new API partner, or running an access review. We want someone who moves comfortably between all of it. We're looking for someone who treats AI as a practical security tool and understands how AI agents and MCPs actually work, including where they introduce risk. If you've already thought about what it means to govern agent access to enterprise data, we want to talk to you. Our ideal candidate is responsive, independent, and self-directed. Someone who spots security problems early and sees them through to resolution.Responsibilities and DutiesCloud Security Engineering Own Azure cloud security projects, including control enablementRepresent security on the Cloud Architecture Review Board and Change Advisory BoardHelp build our post-quantum cryptography readiness planVulnerability Management & Security Operations Drive vulnerability remediation with dev teams through CrowdStrike and OX SecurityParticipate in the security on-call rotation, triaging through CrowdStrike CompleteAI Security Evaluate and secure AI tools, integrations, and agents before deploymentReview and approve MCP servers against our governance modelSupport the AI Steering Committee on security requirements for AI initiativesRisk & Access Review Complete vendor and employee software requests, approving or denying based on risk toleranceConduct architecture, product, and engineering design risk reviews early in the SDLCOwn quarterly all-user access reviewsQualifications5+ years in security engineering or cloud securityDemonstrated experience running access reviewsWorking knowledge of AI agents and MCP, including the access and data exposure risks they createTrack record of driving projects to completion with minimal oversightHighly responsive, with clear stakeholder communication throughout a projectAble to participate in an on-call rotationRequired Software ExperienceMicrosoft AzureCrowdStrikeNote: This job description is not intended to be all-inclusive. Employee may perform other related duties as requested to meet the ongoing needs of the organization.Salary Range: $65,920.00 - $82,400.00 USDCandidate Integrity & Monitoring Notice: We maintain a zero-tolerance policy for using AI tools, deepfakes, or impersonation to misrepresent a candidate's identity, skills, or qualifications during hiring. We use screening and identity verification methods to detect this and reserve the right to disqualify and report violations. Company-issued equipment, systems, and network activity are monitored for security and compliance purposes; details are provided during interviews and in our employee policies.Equal Opportunity Employer This employer is required to notify all applicants of their rights pursuant to federal employment laws. For further information, please review the Know Your Rights notice from the Department of Labor.