We are seeking a Security Engineer to support a large-scale Facets migration project within the healthcare payer environment. This role will focus on overseeing operational security controls, ensuring audit readiness, and supporting compliance initiatives aligned with CMS requirements. The ideal candidate will help safeguard systems, data, and infrastructure while enabling secure and compliant system transformation.
Key Responsibilities:
Implement and manage operational security controls across applications, infrastructure, and cloud environments
Support audit readiness efforts, including documentation, evidence gathering, and remediation activities
Ensure compliance with CMS requirements and applicable regulatory standards
Monitor systems for security threats and vulnerabilities, responding to incidents as needed
Perform risk assessments and recommend mitigation strategies
Collaborate with cross-functional teams to embed security best practices into system design and operations
Support security activities related to the Facets migration project, including data protection and access controls
Conduct security reviews and participate in code and architecture assessments
Maintain security policies, procedures, and documentation
Assist in developing and improving security processes and frameworks
Requirements
Required Qualifications:
Experience in information security, cybersecurity, or a related role
Strong understanding of security controls, risk management, and compliance frameworks
Experience supporting audit and compliance initiatives
Knowledge of cloud security (AWS, Azure, or similar platforms)
Familiarity with vulnerability management and incident response processes
Strong analytical and problem-solving skills
Excellent communication skills, with the ability to work across technical and business teams
Experience supporting healthcare systems or payer environments
Familiarity with CMS regulations and compliance requirements
Exposure to Facets or similar healthcare platforms
Experience working on system migrations or transformation projects
Relevant certifications (CISSP, CISM, Security+, or similar)
