Senior Security Engineer

Overview

About Health Drive
:

Health Drive delivers on-site healthcare services to residents of long-term care facilities, offering a comprehensive suite of specialties including primary care, behavioral health, dentistry, optometry, podiatry, and audiology. Our mission is to improve the quality of life for patients through compassionate and consistent care, while supporting our partners with reliable, integrated healthcare solutions tailored to the unique needs of senior populations.

About the Role
:

The Senior Security Engineer is Health Drive's in-house owner of day-to-day security operations and security configuration. This role handles the security work that arrives every day — reported phishing, email and data loss prevention alerts, endpoint detections, and escalations from our managed security providers — and drives each to closure. It also owns the configuration and hardening of our Microsoft cloud estate and holds accountability for ensuring identified vulnerabilities are actually remediated.

Health Drive uses managed security providers for around-the-clock monitoring and for network security engineering. This role sits above those providers: it directs their work, evaluates their performance, and remains the decision-maker for Health Drive when a genuine security incident occurs. This is a hands-on engineering role, not a governance or audit role, and not a role that supervises staff.

Work Environment
:

Based at Health Drive’s Framingham, MA office (off Route 9, near Routes 90 and 495) on a hybrid schedule.

Compensation Range
:

$85,000 to $115,000 / experience dependent

#INDHDCORPREC

Day-to-Day Security Operations

• Triage, investigate and resolve reported phishing and email-borne threats, including user communication and follow-up.
• Monitor, tune and maintain email security and data loss prevention policy and alerting; investigate and disposition DLP events involving protected health information.
• Own escalations from Health Drive's managed detection provider from receipt through containment and closure, including endpoint detection and response alerts.
• Investigate user-reported security concerns and suspicious activity, and maintain records of findings and actions taken.

Vulnerability Management

• Own the vulnerability management cycle end to end: scanning, risk-based prioritization, and accountability for remediation reaching completion.
• Work with Infrastructure and Software Development to schedule and validate remediation, including where patching conflicts with clinical or operational workflows.
• Report remediation status, aging and exceptions to IT leadership on a defined cadence.

Cloud and Endpoint Security Configuration

• Own security configuration and hardening of Microsoft Entra , including Conditional Access policy design, review and change control.
• Own Microsoft 365 security configuration and data protection settings across mail, collaboration and file storage.
• Maintain endpoint security policy and configuration, and verify coverage across the managed device estate.
• Review and improve identity, access and privilege configuration, including administrative access and multi-factor authentication enforcement.

Managed Provider Oversight

• Serve as Health Drive's technical owner of the managed security provider relationships, covering monitoring, response and network security engineering services.
• Direct provider work, submit and validate detection tuning requests, and reduce recurring false positives.
• Run periodic service reviews, hold providers to contracted response commitments, and upscale performance shortfalls to IT leadership.
• Maintain documented escalation paths and ensure Health Drive retains the knowledge required to change providers without loss of continuity.

Incident Response

• Recom…