Winner of the Best and Brightest® Companies to Work for in Boston and in the Nation by the National Association for Business Resources (NABR) for the third consecutive year.
Own the Security. Protect the Mission.
At HFI, security is core to the trust we earn every day. We’re hiring an Information Systems Security Engineer (ISSE) to lead, strengthen, and continuously evolve our enterprise security program protecting sensitive healthcare data while enabling our business to move fast and safely.
This is a hands-on, high-visibility role for a security leader who thrives at the intersection of cyber defense, healthcare compliance, and strategic influence.
What You’ll Do:
- Own and evolve HFI’s information security strategy, aligning with business goals and industry best practices.
- Design, implement, and manage security operations across networks, systems, applications, and data.
- Lead incident response, threat detection, vulnerability management, and forensic investigations.
- Ensure compliance with HIPAA, HITECH, HITRUST, ISO 27001, SOC 2, and client security requirements.
- Evaluate and respond to client security assessments, audits, and contractual obligations.
- Manage third-party risk, penetration testing, and remediation efforts
- Translate security risk into clear, actionable insights for executive leadership.
- Champion a culture of security through training, awareness, and accountability.
- Serve as a security advisor and thought leader across projects with privacy or risk implications.
- Collaborate with Infrastructure to mature and optimize cybersecurity tooling and controls.
What You Bring
Required
- Bachelor’s degree or equivalent practical experience.
- 5+ years in IT Infrastructure and/or Information Security.
- 5+ years of hands-on cybersecurity experience (incident response, vulnerability management, cloud or application security, forensics, etc.).
- CISSP or equivalent security certification.
- Hands-on experience with Fortinet security solutions, including firewall configuration, monitoring, and policy management, is highly desirable.
- Proven experience building and managing enterprise-level security programs.
·Strong knowledge of:
- Network, application, cloud, and endpoint security.
- AWS, Microsoft 365, Active Directory, private cloud environments.
- Risk management frameworks and compliance standards.
- Experience leading security incidents end-to-end.
- Ability to clearly communicate complex security topics to both technical and non-technical audiences.
- Curiosity, adaptability, and a continuous-learning mindset.
Nice to Have
- Threat intelligence, attack simulation, and red/blue team experience.
- IAM, PIM, and PAM implementation experience.
- Vulnerability management and remediation expertise.
- Familiarity with scripting and automation (Python, PowerShell).
- Experience analyzing network, application, and system telemetry.
- Strong documentation and reporting skills.
Why HFI?
- Make a real impact protecting healthcare data and client trust.
- Own and shape a security program not just tickets and tools.
- Partner with engaged leadership who values security as a business enabler.
- Work in a collaborative, mission-driven environment that values expertise and accountability.
At this time, HFI will not sponsor a new applicant for employment authorization or offer any immigration related support for this position (i.e. H1B, F-1 OPT, F-1 STEM OPT, F-1 CPT, J-1, TN, or another type of work authorization).
Our Massachusetts based annual salary for this role ranges from $110,000-$120,000. The salary range does not reflect total compensation which includes base salary, benefits and other options.
EEO Statement
HFI is an Equal Opportunity Employer and prohibits discrimination and harassment of any kind. HFI is committed to the principle of equal employment opportunity for all employees and to providing employees with a work environment free of discrimination and harassment. All employment decisions are based on business needs, job requirements and individual qualifications, without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws. HFI will not tolerate discrimination or harassment based on any of these characteristics. HFI encourages applicants of all ages.
Never miss an opportunity! Create an alert based on the job you applied for.
