Cybersecurity Engineer I

Welcome to Clearway Health- a recognized Great Place to Work and destination organization! We arean award-winning culture where talented people are respected, informed, engaged, empowered, developed - and where they want to grow and make a difference. We offer a wide range of benefits, perks and wellness programs in addition to continuous learning opportunities to help you grow. At Clearway Health, diversity, equity, inclusion and belonging are an essential part of our business and workplace culture. Clearway Health emerged as a solution from Boston Medical Center to improve access to care, provide personal support and manage the complex specialty medication needs of vulnerable patients and their families. We partner with hospitals, health systems and the communities they care for to accelerate their specialty pharmacy programs. AtClearwayHealth, we take great pride in our High Five! Values to provide best in class experiences for ouremployees, ourclients and their patients. We welcome you to follow us on LinkedIn where you can also learn more about ourcompany, culture,people, andcareers.

POSITION SUMMARY:

Clearway Health is seeking a Cybersecurity Engineer I to help strengthen and advance our cybersecurity posture. This role will be responsible for designing, building, deploying, and managing technical solutions that support our security program.

The ideal candidate is independent, detail-oriented, and skilled in both technical development and security tools. They are natural troubleshooters and motivated problem solvers who work well with others to understand requirements and implement scalable, automated security solutions.

ESSENTIAL RESPONSIBILITIES/DUTIES:

Security Operations & Monitoring

• Support the deployment, tuning, and ongoing management of a third-party SIEM/SOC in collaboration with the vendor.
• Monitor alerts, validate detections, and help triage incidents across systems.
• Assist in rolling out and managing a new enterprise email security solution, including monitoring and investigating suspicious emails.

Phishing & Awareness Programs

• Deploy and manage phishing simulation tools and programs; analyze results and provide metrics to leadership.
• Build and maintain custom annual security training content in EasyLlama, including voiceover, quizzes, and role-specific modules.
• Partner with stakeholders to strengthen organizational security awareness.

Application Security Support

• Assist the AppDev team in rolling out GitHub Advanced Security, including automated code scanning, dependency checking, and secrets detection.
• Evaluate CI/CD pipelines for security risks and recommend improvements.
• Work with developers to identify, triage, and track vulnerabilities.

Automation & Engineering

• Leverage APIs from AWS and third-party tools to automate manual security tasks.
• Develop scripts and lightweight automation to improve security workflows and reduce repetitive tasks.
• Document automation processes and share with the team for reuse.

Cloud & Infrastructure Security

• Apply working knowledge of AWS to support security controls in the cloud environment.
• Contribute to the deployment, management, and tuning of a Cloud Security Posture Management (CSPM) solution to detect and respond to risks in AWS.
• Partner with Infrastructure and Security teams to triage findings and remediate misconfigurations.

Governance & Asset Management

• Maintain asset, user, and permissions data from a security perspective.
• Support quarterly access reviews in coordination with the GRC platform, technical owners, and business stakeholders.
• Ensure accurate inventory and documentation of security-relevant assets.

Third-Party Security Programs

• Coordinate the scheduling, execution, and tracking of external penetration tests.
• Partner with vendors to manage scope, track remediation, and validate fixes.
• Contribute to reporting and continuous improvement from pen test outcomes.

Collaboration & Growth

• Work closely with IT, Infrastructure, AppDev, and Security teams to align requirements and deliver scalable solutions.
• Stay current with emerging threats, security tools, and best practices.
• Actively contribute to documentation, process improvement, and team knowledge sharing.

Preferred Education or experience: (If none, please enter N/A)

• Familiarity with security concepts such as a SIEM, phishing simulations and vulnerability management.
• Basic knowledge of cloud platforms (AWS preferred), including IAM, networking, and logging fundamentals.
• Strong hands on-experience scripting or programming (e.g., Python, PowerShell, or Bash) for automation.
• Understanding of application security practices, such as code scanning, dependency checking, and secrets management.
• Ability to manage multiple tasks, meet deadlines, and adapt to evolving priorities.
• Strong troubleshooting and problem-solving skills with attention to detail.
• Excellent written and verbal communication skills; able to work effectively with both technical and non-technical stakeholders.
• Self-motivated, curious, and eager to learn new technologies and security practices.
• BS degree required, experience or self-learning may be considered in lieu of degree.

KNOWLEDGE / SKILLS / ABILITY:

• Technical Security Implementation
• Ability to quickly learn and assist with deploying modern security tools, including endpoint, email, and cloud security solutions. Demonstrates curiosity and a willingness to explore how technical controls strengthen overall security. Operational Maintenance and Continuous Improvement
• Skill in helping maintain and tune newly implemented security tools. Comfortable following procedures, updating configurations, and documenting changes to keep systems running effectively and securely. Basic Programming and Cloud Fundamentals
• Foundational understanding of scripting or automation (e.g., Python, PowerShell, or Bash) and basic knowledge of cloud environments such as AWS or Microsoft 365. Demonstrates the ability to learn how to apply these skills to automate and improve security operations. Security Monitoring and Incident Response
• Foundational ability to review alerts, investigate potential issues under guidance, and help coordinate remediation steps to protect users and company data. Demonstrates sound judgment and eagerness to develop deeper investigation skills over time.

SPECIAL WORKING CONDITIONS (ON-CALL, TRAVEL, SHIFT, COVERAGE):

10% travel for meetings and strategy sessions.