Security Engineer (REMOTE)

EnableComp provides Specialty Revenue Cycle Management solutions for healthcare organizations, leveraging over 24 years of industry-leading expertise and its unified E360 RCM intelligent automation platform to improve financial sustainability for hospitals, health systems, and ambulatory surgery centers (ASCs) nationwide. Powered by proprietary algorithms, iterative intelligence from 10M+ processed claims, and expert human-in-the-loop integration, EnableComp provides solutions across the revenue lifecycle for Veterans Administration, Workers' Compensation, Motor Vehicle Accidents, and Out-of-State Medicaid claims as well as denials for all payer classes. By partnering with clients to supercharge the reimbursement process, EnableComp removes the burden of payment from patients and provider organizations while enabling accelerated cash, higher and more accurate yield, clean AR management, reduced denials, and data-rich performance management. EnableComp is a multi-year recipient the Top Workplaces award and was recognized as Black Book's #1 Specialty Revenue Cycle Management Solution provider in 2024 and is among the top one percent of companies to make the Inc. 5000 list of the fastest-growing private companies in the United States for the last eleven years.

POSITION SUMMARY

The Security Engineer serves as the technical bridge between the security policy team and development operations, ensuring that security principles are not only defined but effectively implemented. Embedded within development teams, this role writes code, configures systems, and operationalizes security controls across applications, databases, and AI systems. As a key contributor to the organization's Agentic AI platform transformation, the Security Engineer will design and embed secure-by-design practices, enabling innovation while maintaining the highest standards of data protection and compliance.

THE JOB RESPONSIBILITIES INCLUDE

• Bridge security policy and technical execution by translating organizational security requirements into practical, deployable solutions across applications, data environments, and AI systems.
• Design, build, and deploy security controls across web applications, data pipelines, APIs, and Agentic AI systems to ensure confidentiality, integrity, and availability.
• Implement secure-by-design practices throughout the software development lifecycle, including code-level remediations, configuration hardening, and secure infrastructure deployment.
• Develop automation scripts and infrastructure-as-code to integrate security into CI/CD pipelines, enabling continuous compliance, secrets management, vulnerability scanning, and environment hardening.
• Implement and operationalize AI-specific security frameworks by building guardrails for agentic models, securing data flows, and integrating AI security tooling into development workflows.
• Perform hands-on technical security assessments, including penetration testing, threat modeling, and code reviews, and directly remediate identified vulnerabilities.
• Collaborate with cloud and DevOps teams to deploy monitoring and detection controls and ensure secure configuration baselines across environments.
• Provide practical security guidance and training to developers and engineers during architecture reviews, sprint planning, and project delivery.
• Continuously evaluate and improve the organization's security posture through testing, feedback loops, and adoption of emerging best practices for AI and distributed systems.
• Document security architectures, configurations, and implementation patterns to support ongoing operations, compliance, and knowledge sharing.
• Other duties as required

REQUIREMENTS AND QUALIFICATIONS

• Bachelor's degree in Computer Science, Information Security, Engineering, or a related technical field required
• 3+ years in hands-on application security, DevSecOps, or security engineering roles.
• Proven experience building and configuring secure CI/CD pipelines (Jenkins, GitLab CI, GitHub Actions, Azure DevOps).
• Equivalent combination of education and experience will be considered.
• Deep proficiency with cloud security in AWS, Azure, or GCP environments.
• Strong implementation experience with infrastructure as code (Terraform, CloudFormation) and container security (Docker, Kubernetes).
• Strong scripting and automation skills (Python, Bash, PowerShell) for security tooling.
• Versatility across web/API security, data pipeline security, microservices, and database security.
• Understanding of security frameworks (NIST, ISO 27001, SOC 2) and compliance requirements (GDPR, HIPAA, PCI-DSS).
• Hands-on experience deploying and configuring security scanning tools (SAST, DAST, SCA).
• Excellent communication skills-ability to translate security requirements into working technical implementations.
• Experience working embedded within cross-functional development teams.
• Proven track record of hands-on problem-solving in fast-paced development environments
• Regular and predictable attendance
• Equivalent combination of education and experience will be considered

• Must have strong computer proficiency and understand how to use basic office applications, including MS Office (Word, Excel, and Outlook)
• To perform this job successfully, an individual must be able to perform each essential duty satisfactorily. Reasonable accommodation may be made to enable qualified individuals with disabilities to perform the essential functions.

SPECIAL CONSIDERATIONS & PREREQUISITES

• Practices and adheres to EnableComp's Core Values, Vision and Mission

• Hands-on experience with AI/ML security, model security, and data governance
• Technical knowledge of LLM security, prompt injection prevention, and AI agent safety
• Security certifications (CISSP, CEH, OSCP, CSSLP, or cloud security certifications)
• Strong coding background in Python, Go, or similar languages.
• Background in software development or engineering transitioning to security.
• Direct experience implementing secrets management solutions (HashiCorp Vault, AWS Secrets Manager).
• Practical experience with zero trust architecture implementation.
• Familiarity with data security, ETL processes, and data warehouse security.
• Experience with microservices architectures and distributed systems security

EnableComp is an Equal Opportunity Employer M/F/D/V. All applicants will be considered for this position based upon experience and knowledge, without regard to race, color, religion, national origin, sexual orientation, ancestry, marital, disabled or veteran status. We are committed to creating and maintaining a workforce environment that is free from any form of discrimination or harassment.
EnableComp recruits, develops and retains the industry's top talent. As the employer of choice in the complex claims industry, EnableComp takes pride in our continuous commitment to building and maintaining a culture centered around fostering the professional growth and development of our people. We believe that investing in our employees is the key to our success , and we are dedicated to providing them with the tools, resources, and support they need to thrive and grow their career here. At EnableComp, we are committed to living up to our core values each and every day, and we believe that this commitment is what sets us apart from other companies. If you are looking for a company that values its employees and is dedicated to helping them achieve their full potential, then EnableComp is the place for you.

Don't just take our word for it! Hear what our people are saying: "I love my job because everyone shares the same vision and is determined and dedicated. People care about you as a person and your professional growth. There is a genuine spirit of cooperation and shared goals all revolving around helping each other." - Revenue Specialist

"I enjoy working for EnableComp because of the Core Values we believe in. EnableComp stands true to these values from empowering employees to ecstatic clients. This company is family oriented and flexible, along with understanding the balance of work, life, and fun." - Supervisor, Operations