At Devoted Health, we’re on a mission to dramatically improve the health and well-being of older Americans by caring for every person like family. That’s why we’re gathering smart, diverse, and big-hearted people to create a new kind of all-in-one healthcare company — one that combines compassion, health insurance, clinical care, service, and technology - to deliver a complete and integrated healthcare solution that delivers high quality care that everyone would want for someone they love. Founded in 2017, we’ve grown fast and now serve members across the United States. And we’ve just started. So join us on this mission!
Job Description
A bit about this role:
We’re looking for a security operations engineer to join our growing Cybersecurity team. This hands-on role will be equally focused on both incident investigation and building the tools we use to secure our healthcare practice. Ideal candidates are highly motivated individuals who thrive in fast-paced environments, are comfortable with modern technology stacks that leverage the cloud, and who see risk as something to manage pragmatically.

Your Responsibilities and Impact will include:

• Proactively identify and investigate potential threats by analyzing security event data from a wide range of sources, including SIEM, IDS/IPS, and EDR.
• Lead incident response activities to contain, eradicate, and recover from security threats, performing deep-dive forensic analysis and documenting findings.
• Engineer, deploy, and maintain advanced security tools to enhance our threat detection capabilities across the organization.
• Develop automation and orchestration using scripting languages (e.g., Python, Go) to streamline security operations and enable faster response to identified threats.
• Serve as a security subject matter expert, providing guidance to development and operations teams on security best practices, threat modeling, and secure architecture design.

Required skills and experience:

• 5+ years of experience as a technical, hands-on security operations engineer in a highly regulated industry.
• Experience working in an incident response related role, triaging a wide variety of alerts, and leading response activities.
• Practical experience building automation and security detection capabilities at scale in Python, Go, or related scripting language. .
• Hands-on experience building and administering industry standard security tools such as secure email gateways, SIEM, EDR, SOAR, CSPM, and vulnerability scanners.
• Excellent communication skills with the ability to comfortably and effectively articulate security and risk related concepts to highly technical audiences.

Desired skills and experience:

• Fundamental knowledge of relevant security and control frameworks, such as HIPAA, HITRUST, PCI, and GDPR.
• Experience working with artificial intelligence and LLMs to augment and enhance security operations.

LI-Remote

Salary Range: $150,000-$165,000
Our ranges are purposefully broad to allow for growth within the role over time. Once the interview process begins, your talent partner will provide additional information on the compensation for the role, along with additional information on our total rewards package. The actual base salary offered may depend on a variety of factors, including the qualifications of the individual applicant for the position, years of relevant experience, specific and unique skills, level of education attained, certifications or other professional licenses held, and the location in which the applicant lives and/or from which they will be performing the job.

Our Total Rewards package includes:

• Employer sponsored health, dental and vision plan with low or no premium
• Generous paid time off
• $100 monthly mobile or internet stipend
• Stock options for all employees
• Bonus eligibility for all roles excluding Director and above; Commission eligibility for Sales roles
• Parental leave program
• 401K program
• And more….
• Our total rewards package is for full time employees only. Intern and Contract positions are not eligible.

Healthcare equality is at the center of Devoted’s mission to treat our members like family. We are committed to a diverse and vibrant workforce.
Devoted is an equal opportunity employer. We are committed to a safe and supportive work environment in which all employees have the opportunity to participate and contribute to the success of the business. We value diversity and collaboration. Individuals are respected for their skills, experience, and unique perspectives. This commitment is embodied in Devoted’s Code of Conduct, our company values and the way we do business.
As an Equal Opportunity Employer, the Company does not discriminate on the basis of race, color, religion, sex, pregnancy status, marital status, national origin, disability, age, sexual orientation, veteran status, genetic information, gender identity, gender expression, or any other factor prohibited by law. Our management team is dedicated to this policy with respect to recruitment, hiring, placement, promotion, transfer, training, compensation, benefits, employee activities and general treatment during employment.
We have been made aware of instances of fraudulent job postings and/or fraudulent recruiting activity by individuals purporting to represent Devoted Health. These fraudulent schemes often seek monetary contributions or payments from job seekers (such as for “start up costs” or “equipment”), or seek to collect sensitive personal information. These job postings and offers are NOT authorized by Devoted Health and Devoted is not responsible for fraudulent offers, personal information that you may have disclosed, or payments made to third parties purporting to represent Devoted. We have reported this matter and are cooperating with law enforcement agencies. Devoted Health will never ask for financial commitment or contribution from a candidate at any stage of the recruitment process.

• Proactively identify and investigate potential threats by analyzing security event data from a wide range of sources, including SIEM, IDS/IPS, and EDR.
• Lead incident response activities to contain, eradicate, and recover from security threats, performing deep-dive forensic analysis and documenting findings.
• Engineer, deploy, and maintain advanced security tools to enhance our threat detection capabilities across the organization.
• Develop automation and orchestration using scripting languages (e.g., Python, Go) to streamline security operations and enable faster response to identified threats.
• Serve as a security subject matter expert, providing guidance to development and operations teams on security best practices, threat modeling, and secure architecture design