Associate Security Engineer

Join Veradigm as a hybrid Associate Security Engineer in Raleigh, NC, partnering closely with product, DevOps, cloud operations, and hosting teams to drive product security outcomes.

Responsibilities

• Act as the day-to-day Product Security Liaison (PSL) for assigned Veradigm products as the primary security point of contact between security and product/engineering teams.
• Coordinate with development and operational teams to apply security best practices and use advanced security technologies.
• Identify security vulnerabilities and build/execute remediation plans with product teams, including tuning and integrating security tools to reduce false positives.
• Triage, validate, and route findings from cloud security, vulnerability scanning, application security testing, and bug bounty programs.
• Create and track remediation tickets to closure within defined SLAs.
• Prepare and present recurring security posture reports for assigned products, covering risk, open exceptions, and remediation progress for engineering and executive leadership.
• Support product teams implementing future-state security requirements and maturity initiatives, tracking progress and collecting evidence of completion.
• Provide security input on product architecture, design changes, and cloud/network configuration requests with guidance from senior PSLs.
• Support the security exception process for assigned products by documenting risk, compensating controls, owners, and expiration dates.
• Assist with day-to-day technical control activities and escalation events from security tools and the SOC, including investigating PSL-assigned alerts and coordinating response with product teams.
• Help implement security solutions and ensure alert/report fidelity to the Security Operations Center (SOC).
• Participate in defining and documenting runbooks for SOC and product security processes, including process and procedure documentation.
• Participate in security reviews and sign-off activities for assigned products, including disaster recovery/business continuity plans and new builds or releases.
• Review and contribute to benchmarking, installation, upgrade, configuration, deployment, and tuning activities for security solutions used by assigned products.
• Investigate innovative approaches to improve datacenter, cloud, and application hosting security.

Requirements

• Bachelor's Degree or equivalent.
• 0-2 years of relevant job experience.

Preferred Experience

• Experience with Linux, Windows, Splunk, Azure, and AWS.
• Experience with CI/CD security and application security principles.
• Understanding of HIPAA healthcare data security.

Technical Knowledge & Skills

• Working knowledge of vulnerability classes such as OWASP Top 10 and CWE, plus severity/prioritization methods such as CVSS, EPSS, and CISA KEV.
• Understanding of cloud security fundamentals: identity and access management, least privilege, network segmentation, encryption, and logging.
• Ability to translate technical findings into clear business risk for engineering and executive audiences.
• Ability to manage priorities across multiple product teams and drive findings through to verified closure.
• Clear written communication for tickets, runbooks, technical documentation, and presentations.
• Familiarity with attacker techniques and frameworks such as MITRE ATT&CK.
• Ability to handle protected health information (PHI) and other confidential data with discretion.
• Willingness to learn, seek guidance, and grow into a fully independent PSL.

Technologies

• Linux, Windows, Splunk
• Azure, AWS
• CI/CD security
• Application security principles
• OWASP Top 10, CWE, CVSS, EPSS, CISA KEV, MITRE ATT&CK