Security Operations Engineer

The Security Operations Engineer builds and operates security controls, tooling, and automation across DeepHealth 's cloud and corporate environments.

This role is responsible for configuring, integrating, and maintaining the enterprise security tooling stack, developing detection content, and automating security operations tasks so that controls are repeatable, version-controlled, and auditable.

Working within DeepHealth 's established security frameworks and under the direction of the Director, Security Operations, this position operates and tunes security controls, detection content, and guardrails.

Independent validation of those controls sits with the security operations watch function — a deliberate separation that keeps the control environment defensible under audit.

Remediation follows system ownership across Cloud Operations, Platform, and Application Development; this role supplies technical guidance and implements fixes directly where the control is security-owned.

This position operates within a regulated healthcare environment across a global operating footprint, with obligations under HIPAA, ISO/IEC 27001, and SOC 2. The role reports to the Director, Security Operations, with future reporting to the Manager, Security Operations as that position is established.

Requirements

Build, configure, integrate, and tune the enterprise security tooling stack across cloud and corporate environments. Develop and maintain detection content, correlation rules, and response automation within the SIEM and SOAR platform.

Onboard new log sources and telemetry feeds, validating ingestion completeness, parsing accuracy, and field normalization. Administer and tune endpoint detection and response tooling, including policy configuration, exclusion governance, and coverage validation.

Integrate security tooling with adjacent platforms through APIs to reduce manual handling and improve data quality. Implement and maintain security configurations, guardrails, and baselines acro