Staff Engineer, Security

Job Description:

• Develop and maintain security tooling, guidelines, and standards for the Security Engineering team.
• Collaborate with DevSecOps teams in authoring cloud native security policies via Terraform, and IaC scanning as part of all IaaS deployments.
• Participate in threat intelligence and forensic analysis exercises, to predict and prevent attacks.
• Work closely with application and infrastructure teams to automate the mitigation of vulnerabilities against all cloud hosted systems.
• Create and maintain thorough runbooks and incident response documentation for the Security Operations Center (SOC).
• Create and monitor correlated event dashboards in the SIEM, alerting against thresholds you develop.
• Leverage AI-enabled IDE's to speed up security reviews of infrastructure-as-code, pull requests, and architecture designs, while validating AI-generated findings and recommendations for accuracy.
• Use a Cloud-Native Application Protection Platform (CNAPP) to identify and prioritize misconfigurations, vulnerabilities, excessive permissions, and exposure across cloud workloads, containers, and pipelines, and integrate its findings with the SIEM.
• Research and understand AI-driven threats, such as AI-enabled phishing and social engineering, prompt injection, data leakage, and misuse of AI agents and tools, and translate them into detections, controls, and guidance for engineering teams.
• Securely connect AI tools to the CNAPP, SIEM, and other security data sources using the Model Context Protocol (MCP), including assessing the security risks of MCP servers, tool permissions, and data access.
• Use AI tools to correlate CNAPP and SIEM data and provide contextual reporting on the platform's risk posture, turning findings into clear, prioritized, and actionable insights for engineering teams and leadership.
• Research, implement, and configure security protections for email, hosts, and identities.
• Write scripts to automate manual tasks.

• Bachelor's Degree in Computer Science or related discipline. Or, any combination of education and experience which would provide the required qualifications for the position.

• 6+ years of experience in systems engineering, software engineering, security, or related experience.
• Experience with modern source control and ticketing tools such as Git, Jira, and Confluence.
• Licenses
• Certifications in Amazon Web Services (AWS), Google Cloud Platform (GCP), OCSP, CEH, or similar

• Knowledge of: Windows or Linux shell scripting and coding with a language like Python; infrastructure-as-code tooling like CloudFormation & Terraform; deploying and managing enterprise-scale applications in cloud services like AWS; Linux operating system; configuration management tools like Ansible, Puppet, Chef, and containerization technologies; building and testing software using Jenkins or similar continuous integration systems; relational and/or NoSQL databases like Microsoft SQL Server, PostgreSQL, and MongoDB; Microsoft Office Suite.
• Knowledge of: AI-assisted development and security tools such as Claude Code; the Model Context Protocol (MCP) and how it connects AI agents to tools and data, including its security implications; CNAPP platforms; SIEM platforms and log correlation; and emerging AI-driven threats and defenses.
• Skill in: Working as member of a team; communicating effectively; establishing and maintaining effective working relationships.
• Ability to: Determine how a system should work and how changes in conditions, operations, and the environment will affect outcomes; work in a fast-paced environment; stay organized, prioritize workload, multi-task, and meet deadlines.

NextGen Healthcare is an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all employees.