Security Lead (Cybersecurity)

TL;DR

Security Lead (Cybersecurity): Establishing and overseeing the cybersecurity, privacy, and compliance posture for a CMS case management program with an accent on federal healthcare security frameworks, AWS cloud architecture, and DevSecOps controls. Focus on designing secure cloud-native systems, managing ATO and risk activities, and coordinating threat response across integrated healthcare systems.

Location: Remote within AZ, AR, CO, DE, FL, GA, IL, IN, KS, KY, MA, MD, MI, MS, MO, MT, NC, NE, NV, NY, OH, OK, PA, SC, TN, TX, VA, DC, WI, or WV. hirify.global is headquartered in Virginia Beach, VA.

Salary: $145,000–$155,000 per year

Company

hirify.global develops data-centric, healthcare-relevant solutions that improve clinical processes, patient health outcomes, and care delivery efficiency.

What you will do

• Lead cybersecurity strategy and compliance for a CMS case management program.
• Develop security plans, policies, procedures, data classification rules, and incident response processes.
• Support ATO activities, POA&M management, risk registers, audits, and coordination with government security stakeholders.
• Review AWS cloud, application, integration, data, and infrastructure architectures for security gaps.
• Embed IAM, MFA, encryption, network segmentation, Zero Trust, and automated security scanning into cloud and CI/CD environments.
• Conduct threat modeling, risk assessments, third-party evaluations, vulnerability mitigation, and secure API interoperability reviews.

Requirements

• Bachelor’s degree in Cybersecurity, Information Systems, Computer Science, or a related field.
• 10+ years of cybersecurity experience, including 2+ years supporting federal health programs.
• 5+ years securing cloud-based solutions, including AWS.
• Experience with healthcare or CMS-related systems, ATO processes, and federal compliance frameworks including CMS ARS, FISMA, HIPAA/HITECH, NIST 800-53, and FedRAMP.
• Experience leading security teams in Agile and DevSecOps environments.

Nice to have

• CISSP certification.

Culture & Benefits

• Remote work arrangement for candidates located in approved US states.
• Purpose-driven work focused on healthcare quality and patient outcomes.
• Work includes collaboration with program leadership, architects, DevSecOps specialists, government security stakeholders, and compliance auditors.
• Equal employment opportunity and reasonable accommodation support.