Staff Security Engineer (Forensic Engineer), Remote

Position Overview

• Location Type: Not Specified
• Employment Type: Full Time
• Salary: Not Specified
• Brief Description: The Staff Security Engineer - Forensic Engineer at Aledade will play a critical role in protecting sensitive healthcare data and ensuring compliance with regulatory requirements. You will lead complex digital forensic investigations, support incident response efforts, and enhance our forensic readiness across a cloud-native environment. This is a high-impact role that supports our mission to safeguard patient privacy and clinical data while maintaining operational integrity.

Requirements

• Education: BS/BTech (or higher) in Computer Science, Information Technology, Cybersecurity or a related field, or 10 years security domain experience without degree.
• Experience: 8+ years of experience in digital forensics, incident response, or security engineering, preferably in SaaS or healthcare.
• Preferred Knowledge, Skills, and/or Abilities:
  • Digital Forensics: Strong expertise in digital forensics.
  • Cloud Forensic Investigations: Hands-on experience with cloud forensic investigations (AWS, Azure, or GCP), including container environments (e.g., Kubernetes).
  • Forensic Tools: Proficiency with tools such as EnCase, Velociraptor, X-Ways, Volatility, or similar.
  • Regulatory Compliance: Understanding of HIPAA, HITECH, and other relevant healthcare security and privacy standards.
  • Operating Systems & Analysis: Solid knowledge of operating systems, file systems, memory structures, and log analysis.
  • Scripting & Automation: Proficiency in scripting and automation (e.g., Python, PowerShell, Bash) to streamline investigations.
  • Communication: Strong written and verbal communication skills; able to present complex findings to diverse audiences.
  • Certifications (Preferred): GCFA, GCFE, EnCE, CHFI, or similar.
  • Framework Knowledge: Knowledge of HITRUST, SOC 2, or ISO 27001 control frameworks.
  • Bonus: Background in threat hunting or malware analysis.

Responsibilities

• Lead investigations into security incidents involving PHI/PII across endpoints, networks, SaaS platforms, and cloud infrastructure.
• Perform forensic analysis to determine the scope, impact, and root cause of security breaches or data loss events.
• Develop and maintain investigation procedures, forensic toolkits, and evidence handling practices aligned with industry and regulatory standards.
• Partner with Legal, Privacy, and Compliance teams on HIPAA-related investigations and e-discovery matters.
• Produce detailed investigation reports for internal stakeholders, regulators, and executive leadership.

Application Instructions

• Not Specified

Company Information

Aledade is a public benefit corporation that exists to empower the most transformational part of our health care landscape - independent primary care. We were founded in 2014, and since then, we've become the largest network of independent primary care in the country - helping practices, health centers and clinics deliver better care to their patients and thrive in value-based care. Additionally, by creating value-based contracts across a wide variety of health plans, we aim to flip the script on the traditional fee-for-service model. Our work strengthens continuity of care, aligns incentives and ensures primary care physicians are paid for what they do best - keeping