Prepare and present recurring security posture reports for assigned products, summarizing risk, open exceptions, and remediation progress for engineering and executive leadership.
Assist product teams in implementing future-state security requirements and maturity initiatives, tracking progress and gathering evidence of completion.
Review and provide security input on product architecture, design changes, and cloud/network configuration requests with guidance from senior PSLs.
Support the security exception process for assigned products, documenting risk, compensating controls, owners, and expiration dates.
Support day-to-day technical controls and escalation events from both security tools and the SOC; investigate alerts assigned to the PSL and coordinate response with product teams.
Assist in the implementation of security solutions and ensure the fidelity of alerts/reports to the Security Operations Center.
Participate in the definition and documentation of runbooks for SOC and product security processes, including process and procedure documentation.
Participate in security reviews and sign-off activities for assigned products, such as disaster recovery/business continuity plans and new builds or releases.
Review and participate in benchmarking, installation, upgrade, configuration, deployment, and tuning activity for security solutions used by assigned products.
Investigate innovative approaches to improve datacenter, cloud, and application hosting security.
Experience in Linux OS administration
Job Requirements
Bachelor's Degree or equivalent
0-2 years of relevant job experience
Preferred Experience
Linux, Windows, Splunk, Azure, AWS, CI/CD security, and application security principles
Understanding of HIPAA healthcare data security
Knowledge, Skills & Abilities
Working knowledge of common vulnerability classes (e.g., OWASP Top 10, CWE) and severity/prioritization methods (e.g., CVSS, EPSS, CISA KEV)
Understanding of cloud security fundamentals, including identity and access management, least privilege, network segmentation, encryption, and logging
Ability to translate technical findings into clear business risk for engineering and executive audiences
Ability to manage priorities across multiple product teams and follow findings through to verified closure
Clear written communication for tickets, runbooks, technical documentation, and presentations
Familiarity with attacker techniques and frameworks such as MITRE ATT&CK
Ability to handle protected health information (PHI) and other confidential data with discretion
Willingness to learn, seek guidance, and grow into a fully independent PSL
This is Raleigh, NC-based hybrid role, requiring 2-days in the office each week.
Compensation for this job is subject to market conditions, geographic considerations, the candidate’s unique skills and experience, state and local laws, and budget. Our commitment to pay transparency is a testament to our dedication to creating a fair, equitable, and inclusive workplace. By continuously analyzing market trends, staying abreast of changes in state laws, and making budgetary adjustments accordingly, we strive to ensure that our compensation practices reflect the value we place on our associates’ unique contributions and support their professional growth.
Enhancing Lives and Building Careers
Veradigm believes in empowering our associates with the tools and flexibility to bring the best version of themselves to work and to further their professional development. Together, we are In the Network. Interested in learning more?
Take a look at our Culture, Benefits, Early Talent Program, and Additional Openings.
Visa Sponsorship is not offered for this position.
At Veradigm, our greatest strength comes from bringing together talented people with diverse perspectives to support the needs of healthcare providers, life science companies, health plans, and the patients they serve. The Veradigm Network is a dynamic, open community of solutions, external partners, and cutting-edge artificial intelligence technologies that provide advanced insights, technology, and data-driven solutions. Veradigm offers a comprehensive compensation and benefits package, including holidays, vacation, medical, dental, and vision insurance, company paid life insurance and retirement savings.
Veradigm’s policy is to provide equal employment opportunity and affirmative action in all of its employment practices without regard to race, color, religion, sex, national origin, ancestry, marital status, protected veteran status, age, individuals with disabilities, sexual orientation or gender identity or expression or any other legally protected category. Applicants for North American based positions with Veradigm must be legally authorized to work in the United States or Canada. Verification of employment eligibility will be required as a condition of hire. Veradigm is proud to be an equal opportunity workplace dedicated to pursuing and hiring a diverse and inclusive workforce.
From a "VEVRAA Federal Contractor" We request Priority Referral of Protected Veterans
This is an official Veradigm Job posting. To avoid identity theft, please only consider applying to jobs posted on our official corporate site.
Thank you for reviewing this Veradigm opportunity. Does this look like a great match for your skill set? If so, scroll on down and tell us more about yourself!
