Posted: 14-Jul-25
Location: Pittsburgh, Pennsylvania
Type: Full Time
Categories:
eNGINE builds Technical Teams. We are a Solutions and Placement firm shaped by decades of interaction with Technical professionals. Our inspiration is continuous learning and engagement with the markets we serve, the talent we represent, and the teams we build. Our Consulting Workforce is encouraged to enjoy career fulfillment in the form of challenging projects, schedule flexibility, and paid training/certifications. Successful outcomes start and finish with eNGINE.
eNGINE is seeking a Security & Compliance Engineer who can confidently operate at the intersection of technical security operations and compliance. This is a hybrid role requiring equal parts incident response and SOC maturity building, with governance and certification management (HITRUST, SOC2, etc.) as a consistent thread. We're seeking a well-rounded, mid-to-senior level professional who can own incident response, coordinate HITRUST efforts, and enforce policy across our modern cloud-native stack.
What You’ll Be Doing:
- Lead incident response readiness, testing, and process maturity
- Serve as point of contact for HITRUST certification and documentation
- Manage risk assessments, security questionnaires, and compliance governance
- Monitor and evolve cloud and SaaS security posture (Azure, DataDog, etc.)
- Oversee DR, BCP, and physical security documentation and testing
- Create, maintain, and test incident response and business continuity playbooks
You’ll Fit This Role If You Have:
- 5+ years in a Security Engineering or Senior Security Analyst role
- 3+ years hands-on experience in vulnerability remediation or security operations
- Proven experience with security compliance frameworks (SOC2, HITRUST, ISO, etc.)
- Strong technical acumen in identity management, MFA, and SIEM tools (we use DataDog)
- Certifications in Networking, Cloud Security, or Incident Response preferred
- Healthcare, Pharma, or SaaS platform industry experience strongly preferred