Operations

Security Engineer

Nashville, TN

ProviderTrust empowers a safer, smarter healthcare for patients, providers, and payors. Based in Nashville, Tennessee since our launch in 2010, we create powerful solutions to solve complex problems to make healthcare data meaningful and actionable. Our mission is to create a safer healthcare for everyone.

We partner with HR, Compliance, and Provider Operations teams to monitor healthcare populations to identify license, credential, compliance, and payment eligibility issues before they impact patients. We monitor employees, vendors, provider networks, licenses, credentials and more for OIG and state Medicaid exclusions, sanctions or disciplinary actions, license expirations or suspensions and more, continuously verifying everything at the primary source.

Our solutions combine an intuitive user experience with advanced data matching algorithms and seamless integrations to continuously identify and verify compliance issues in the optimal workflow, such as an HRIS or claims processing system.

We are seeking a highly motivated and talented Security Engineer to evolve and refine the infrastructure solutions we have in place as well as tackle the ones we have yet to see. If open ports keep you up at night, this position may be for you!

Requirements

BS or MS degree in engineering, computer science, or related field
3+ years of direct experience with the technologies and duties of this position.
Experience working in a SaaS and healthcare context
Professional experience with AWS CloudFormation Templates
Professional experience with git
Professional experience with monitoring tools (eg: Nagios, Cloudwatch, Prometheus)
A passion for learning and keeping up to date with the latest tools and technologies
A strong work ethic and attention to detail
Able to work on-site at our Nashville location as a salaried full-time employee.
Demonstrated ability to identify risks associated with business processes, operations, information security programs, and technology projects
The ability to be the enterprise security subject matter expert who can explain technical topics to those without a technical background
Strong critical thinking and analytical skills
Strong project management and team-building skills, including the ability to drive projects and initiatives across functions

Recommended Experience:

Knowledgeable about Penetration Testing techniques
Strong understanding of Web Application vulnerabilities (OWASP) and attacks.
Ability to translate traditional information security best practices and defense-in-depth approaches to virtualized/cloud-based environments.
Designing and maintaining secure Linux web servers
Designing secure Docker containers according to best practices
Container orchestration technologies like Kubernetes, ECS, etc.
Automated configuration management tools (eg: Puppet, Ansible)
Continuous integration and continuous deployment tools (Jenkins)
Maintaining relational database systems (PostgreSQL)
Java, Tomcat, or Apache Web Server
Windows server
The building or managing of a microservice architecture a plus
Healthcare security background preferred

Preferred Certifications:

Certified Information Systems Security Professional (CISSP)
Certified Information Security Manager (CISM)
Certified Information Systems Auditor (CISA)
Certified in Risk and Information Systems Control
Certified Ethical Hacker
Global Information Assurance Certification
AWS certifications

Duties and Responsibilities

Evaluate and refine existing web server, cloud infrastructure, and application security/availability
Serve as a subject matter expert for AWS, infrastructure, and systems security/availability
Serve as the point person for security questionnaires related to IT/infrastructure
Assist the development team in the design and implementation of new infrastructure solutions with a focus on security, recoverability, and scalability
Evaluate and refine existing compliance (eg: SOC, HIPAA) controls
Develop and enforce control mechanisms and evolve them regularly as business or regulatory needs evolve including meeting SOC2 and HIPAA requirements, scheduling and managing audits, maintaining and updating company risk assessment and security policies
Communicate requirements to all stakeholders including employee training and building a pro-active security culture and representing ProviderTrust’s security program and practices to clients and regulators
Detect and prevent potential threats and manage the response including maintaining an incident response plan and scheduling and overseeing penetration testing
Maintain and enhance role-based application access
Ensure security controls for network architecture and development process as well as for local hardware, network, and environment

What It’s Like To Work Here

We take immense pride in cultivating a strong, person-first culture always looking for ways to be intentionally uncommon. Our team is made up of talented, creative, kind, funny, and energetic folks wired for continuous and ongoing improvement. To be great at ProviderTrust, we find our team members have these things in common:

Gain energy from working in a fast-paced, creative environment
Decision making that employs a blend of data-driven insights and intuition
Ability to multitask and handle multiple projects concurrently
Resilience and positivity, able to address setbacks and bounce back quickly
Resourcefulness, discovering creative ways to get things done
Joy in making an immediate and positive impact
Diverse interests that are welcomed and extend beyond our organization

Things That Make Us A Great Place To Work

Competitive base salary and incentive package
401k with employer match
HSA with employer contribution
Stock option program
Excellent medical and dental benefits, disability and life insurance
Unlimited PTO (yes, really – we’ll talk about how it works)
Growth! Lots of new people, new talent, and new opportunities for our team
A stocked kitchen and wellness meal plan
Ergonomic desk setup and open workspaces
Lots of celebrations! Events, happy hours, and more
Dog-friendly – WOOF!
Voted one of the Best Places to Work by the Nashville Business Journal (2015 – 2019)
Inc. 5000 list of the fastest-growing private firms in the U.S. (2016-2019)