Designs, implements, and manages cybersecurity controls across healthcare IT environments, including EHRs, medical devices, and cloud systems. Configures security tools, conducts vulnerability assessments and penetration testing, monitors and responds to incidents, performs forensic investigations, and maintains incident response plans. The role supports HIPAA, HITECH, HITRUST, and SOC 2 compliance, audit readiness, security reporting, client collaboration, and security awareness initiatives.
Cybersecurity Engineer – Remote
DAS Health – Healthcare IT Managed Services & Solutions
Overview
DAS Health is seeking a Cybersecurity Engineer to join our growing cybersecurity team. This role plays a critical part in protecting client and organizational data, with a strong focus on safeguarding patient health information (PHI) in a healthcare environment.
The Cybersecurity Engineer will design, implement, and manage security controls across complex healthcare IT systems while ensuring compliance with key regulatory frameworks such as HIPAA, HITECH, and SOC 2. This role is ideal for someone who thrives in a fast-paced MSP environment and is passionate about security, compliance, and protecting critical healthcare systems.Key Responsibilities
At DAS Health, we’re helping healthcare organizations operate more efficiently and securely through innovative technology solutions. When you join our team, you’ll benefit from:
DAS Health is a leading healthcare IT managed services provider and technology partner. We support healthcare organizations with managed IT services, cybersecurity, and consulting solutions that improve operational efficiency, enhance patient experiences, and drive better outcomes
DAS Health – Healthcare IT Managed Services & Solutions
Overview
DAS Health is seeking a Cybersecurity Engineer to join our growing cybersecurity team. This role plays a critical part in protecting client and organizational data, with a strong focus on safeguarding patient health information (PHI) in a healthcare environment.
The Cybersecurity Engineer will design, implement, and manage security controls across complex healthcare IT systems while ensuring compliance with key regulatory frameworks such as HIPAA, HITECH, and SOC 2. This role is ideal for someone who thrives in a fast-paced MSP environment and is passionate about security, compliance, and protecting critical healthcare systems.Key Responsibilities
- Design and implement security architecture across healthcare systems, including EHR platforms, medical devices, and healthcare information exchanges
- Configure and manage security tools such as firewalls, IDS/IPS, SIEM, DLP, MFA, EDR, and encryption technologies
- Conduct vulnerability assessments and penetration testing, identifying and mitigating risks across client environments
- Monitor and respond to security incidents, performing root cause analysis and implementing corrective actions
- Develop and maintain incident response plans, ensuring rapid and compliant response to security breaches
- Perform forensic analysis and support breach investigations, including HIPAA reporting requirements
- Monitor security systems and logs, proactively identifying threats and unusual activity
- Build and maintain reporting dashboards for clients and internal stakeholders
- Ensure compliance with industry standards, including HIPAA, HITECH, HITRUST, and SOC 2 Type II
- Support audit readiness and participation, including documentation and control maintenance
- Collaborate with internal teams and clients to integrate security into daily workflows and operations
- Support security awareness training and partner with vendors to ensure strong security practices
- Bachelor’s degree in Computer Science, Information Security, or a related field (Master’s or certifications preferred)
- 3–5 years of cybersecurity engineering experience, ideally within a healthcare or MSP environment
- Hands-on experience with security technologies including firewalls, IDS/IPS, SIEM, DLP, MFA, EDR, and email security
- Experience securing cloud environments (AWS, Azure, or GCP)
- Experience supporting or preparing for SOC 2 Type II audits
- Strong knowledge of healthcare compliance frameworks (HIPAA, HITECH, HITRUST)
- Familiarity with network and security architecture in complex environments
- Experience with scripting tools such as Python or PowerShell
- Strong analytical and problem-solving skills with the ability to manage complex security challenges
- Ability to communicate technical concepts clearly to both technical and non-technical stakeholders
- High level of professionalism, attention to detail, and integrity
At DAS Health, we’re helping healthcare organizations operate more efficiently and securely through innovative technology solutions. When you join our team, you’ll benefit from:
- Competitive compensation and benefits
- Career growth opportunities within a fast-growing organization
- Exposure to diverse client environments and technologies
- A collaborative, team-oriented culture
- The opportunity to make a meaningful impact in healthcare
DAS Health is a leading healthcare IT managed services provider and technology partner. We support healthcare organizations with managed IT services, cybersecurity, and consulting solutions that improve operational efficiency, enhance patient experiences, and drive better outcomes
Similar Jobs
Hardware • Software • Cybersecurity • Defense
Leads cybersecurity authorization efforts through the full RMF lifecycle. Evaluates and improves system security posture, remediates cybersecurity findings, develops authorization packages, implements required changes, and coordinates with engineering, DevOps, software teams, leadership, and external stakeholders to achieve and maintain system authorization.
Top Skills:
DevOpsEnterprise Mission Assurance Support Service (Emass)Risk Management Framework (Rmf)
Hardware • Security • Software • Cybersecurity
Lead cybersecurity assessments for government and enterprise clients, focusing on FedRAMP, FISMA, and NIST RMF compliance. Conduct vulnerability scanning, analyze security architectures and controls, validate remediation, author assessment documentation, engage client stakeholders, mentor team members, and support secure cloud architecture and risk mitigation. The role is remote, requires U.S. citizenship and clearance eligibility, and involves up to 25–50% travel.
Top Skills:
AcasAcunetixApplication SecurityApplied CryptographyAuthentication ProtocolsCjis Security PolicyCloud ComputingDb ProtectDisa StigsFedrampFismaNessusNist RmfNist Sp 800-SeriesNmapSoftware Development Lifecycle (Sdlc)Stig ViewerWebinspect
Security
Secure and accredit multi-tenant, multi-classification cloud environments across development, integration, and test enclaves. Implement JSIG, NIST, STIG, RMF, and ATO requirements; maintain SSPs, POA&Ms, and continuous-monitoring evidence; validate vulnerability, application-security, container, and infrastructure-as-code outputs; support secure cloud and DevSecOps design; and provide cybersecurity guidance for capability-provider artifacts and promotion decisions.
Top Skills:
Acas/NessusAnsibleArgo CdAtoContainer SecurityDastDevsecopsGrafanaHelmJIRAJsigMls/MilsNist Sp 800-53Poa&MPrometheusRmfSastSbomScaSspStigTerraformXactaZero Trust
What you need to know about the San Francisco Tech Scene
San Francisco and the surrounding Bay Area attracts more startup funding than any other region in the world. Home to Stanford University and UC Berkeley, leading VC firms and several of the world’s most valuable companies, the Bay Area is the place to go for anyone looking to make it big in the tech industry. That said, San Francisco has a lot to offer beyond technology thanks to a thriving art and music scene, excellent food and a short drive to several of the country’s most beautiful recreational areas.
Key Facts About San Francisco Tech
- Number of Tech Workers: 365,500; 13.9% of overall workforce (2024 CompTIA survey)
- Major Tech Employers: Google, Apple, Salesforce, Meta
- Key Industries: Artificial intelligence, cloud computing, fintech, consumer technology, software
- Funding Landscape: $50.5 billion in venture capital funding in 2024 (Pitchbook)
- Notable Investors: Sequoia Capital, Andreessen Horowitz, Bessemer Venture Partners, Greylock Partners, Khosla Ventures, Kleiner Perkins
- Research Centers and Universities: Stanford University; University of California, Berkeley; University of San Francisco; Santa Clara University; Ames Research Center; Center for AI Safety; California Institute for Regenerative Medicine
