Principal Cybersecurity Engineer & Security Auditor
Principal Cybersecurity Engineer & Security Auditor
Location: Lynnwood, WA \- mainly remote. We are open to hiring in WA and out of state in OR, CA, AZ, ID, CO, or UT.
This is a remote first role with occasional travel to HQ in Seattle.
Pay: 160k - 200k DOE
Position Overview
We are seeking a Principal Cybersecurity Engineer & Security Auditor to lead technical security engineering and independent auditing for a complex healthcare organization environment. This role combines hands-on offensive and defensive capabilities with compliance and risk management responsibilities driving security architecture, executing technical assessments, operating and tuning security platforms, and ensuring HIPAA and clinical system protections. The objective is to reduce risk, detect and respond to threats (including ransomware and malicious remote access), and enable secure delivery of clinical and business services across enterprise systems.
Key Responsibilities
- Lead and execute hands-on technical security assessments, penetration tests, red team activities, and vulnerability validation across complex enterprise and clinical environments.
- Design, implement, and optimize security architecture and controls for network, endpoints, identity, cloud, and clinical systems (PACS, RIS, VNA, DICOM, HL7).
- Perform independent security audits and compliance assessments focused on HIPAA and healthcare-specific regulations; prepare audit evidence and remediation roadmaps.
- Administer and tune Fortinet FortiGate devices and centralized management/analytics (FortiManager, FortiAnalyzer) to enforce network segmentation, IDS/IPS, and VPN security.
- Deploy, configure and tune Microsoft Defender for Endpoint, Azure AD identity protections, and Azure Sentinel (or equivalent SIEM) for detection, hunting, and automated response.
- Develop and execute ransomware resilience programs including detection rules, backup validation, IR playbooks, containment strategies, and tabletop exercises.
- Investigate security incidents and lead forensic analysis and remediat...
Lorem ipsum dolor sit amet, consectetur adipiscing elit. Sed do eiusmod tempor incididunt ut labore et dolore magna aliqua. Ut enim ad minim veniam, quis nostrud exercitation ullamco laboris nisi ut aliquip ex ea commodo consequat. Duis aute irure dolor in reprehenderit in voluptate velit esse cillum dolore eu fugiat nulla pariatur. Excepteur sint occaecat cupidatat non proident, sunt in culpa qui officia deserunt mollit anim id est laborum.
Sed ut perspiciatis unde omnis iste natus error sit voluptatem accusantium doloremque laudantium, totam rem aperiam, eaque ipsa quae ab illo inventore veritatis.