<p>Location: Philadelphia, Pennsylvania</p><br/><p>Employment Type: Full-time</p><br/><p>Team: Engineering Security</p><br/><div><span style="font-size: 18px">How you will help</span></div><div>As a part of our SecOps team, you will be at the front line of our security compliance, monitoring, risk assessment, escalation and remediation processes. This is a multi-grade position. Your assigned job title will be commensurate with your level of knowledge and experience. You will work directly with the Vice President to manage FedRAMP and other compliance activities.&nbsp; You will own identification and tracking for actions required to mitigate and/or remediate security risks to protect company assets.&nbsp;&nbsp;</div><div><br></div><div><span style="font-size: 18px">What you will do</span></div><div>•&nbsp;Identify and track FedRAMP-required recurring activities to ensure timely completion within required timeframes</div><div>•&nbsp;Coordinate and collaborate with Engineering peers to plan, schedule and execute&nbsp;compliance required actions are completed on time</div><div>•&nbsp;Assist with identifying and implementing needed and recommended policy and procedure changes</div><div>•&nbsp;Lead preparation, planning and completion of third party assessment organization (3PAO) assessment activities</div><div>•&nbsp;Identify required security patches and updates based upon subscribed feeds and vulnerability scanning results</div><div>•&nbsp;Complete security questionnaires and respond to customer inquiries regarding the product and organizational security</div><div>•&nbsp;Complete third party risk assessments and identify risks that need to be managed to uphold our security posture and standards</div><div>•&nbsp;Maintain and/or create incident response, contingency planning and related documentation to support disaster recovery for security incident and event response</div><div>•&nbsp;Occasionally assist with managing and triaging operational security issues and events</div><div>•&nbsp;Occasionally assist with secure development, infrastructure and endpoint engineering activities as needed</div><div><br></div><div><span style="font-size: 18px">About You</span></div><div>•&nbsp;You make security a priority in everything you do</div><div>•&nbsp;You have a basic familiarity with HIPAA Security Rule requirements and the NIST 800-53 cyber security framework</div><div>•&nbsp;You have at least (1) or more years of prior experience supporting a FedRAMP security program</div><div>•&nbsp;You are familiar with scalable and/or cluster compute architectures and have a basic understanding of AWS secure architecture practices</div><div>•&nbsp;You have some prior experience with security anomaly detection, logging, monitoring and vulnerability management tools and how to use them to protect, detect, respond and recover from security incidents</div><div>•&nbsp;You keep up to date on data science tools and distributed computing methodologies</div><div><br></div><div><span style="font-size: 18px">Desired Skills and Experience</span></div><div>•&nbsp;You have some prior Linux system administration experience performing patching, configuration management, and vulnerability remediation</div><div>•&nbsp;You have some experience with Shell scripting, Python, Ruby, or similar languages</div><div>•&nbsp;You’ve administered and are familiar with Nmap, Nessus, OpenVPN, tcpdump, OpenSSL and other related security tools</div><div>•&nbsp;You have a good understanding of data network configuration and infrastructure concepts, including TCP/IP, DNS, routers, internet/intranet/extranet, firewalls, web servers and security hierarchy including the application of encryption key infrastructures and authentication processes</div><div>•&nbsp;You have one or more security certifications demonstrating your knowledge and commitment to the security field</div><div><br></div><div>Base salary for the role is commensurate with experience and can range between $65,000 - 190,000 + annual bonus opportunity.</div><div><br></div><div><br></div><div><b style="font-size: 18px">Hiring Locations</b></div><div><span style="font-size: 11pt">While HealthVerity does support remote work with quarterly travel to our Philadelphia headquarters, our strong preference is to hire team members in the areas below as well as approved states in the Eastern Time Zone. Expansion beyond these markets will occur only when necessary.</span></div><div><br></div><div><span style="font-size: 16px">•&nbsp;</span><span style="font-size: 11pt">Boston, Massachusetts</span></div><div><span style="font-size: 16px">•&nbsp;</span><span style="font-size: 11pt">New York City, New York</span></div><div><span style="font-size: 16px">•&nbsp;</span><span style="font-size: 11pt">Philadelphia, Pennsylvania</span></div><div><span style="font-size: 16px">•&nbsp;</span><span style="font-size: 11pt">Baltimore, Maryland</span></div><div><span style="font-size: 16px">•&nbsp;</span><span style="font-size: 11pt">Washington D.C</span></div><div><span style="font-size: 16px">•&nbsp;</span><span style="font-size: 11pt">Charlotte, North Carolina</span></div><div><span style="font-size: 16px">•&nbsp;</span>Raleigh-Durham, North Carolina</div><div><span style="font-size: 16px">•&nbsp;</span><span style="font-size: 11pt">Atlanta, Georgia</span></div><div><br></div><div><span style="font-size: 11pt">Approved States in the Eastern Time Zone include: CT, DE, FL, GA, IN, MA, MD, MI NC, NJ, NY, OH, PA, RI, TN, and VA.</span></div><div><br></div><div><b style="font-size: 18px">About HealthVerity</b></div><div><span style="font-size: 14.6667px">HealthVerity synchronizes transformational technologies with the nation’s largest healthcare and consumer data ecosystem to power previously unattainable outcomes and fundamentally advance the science. We offer a comprehensive, yet flexible approach, based on the foundational elements of Identity, Privacy, Governance and Exchange (IPGE), that synchronizes unparalleled Identity management with built-in Privacy compliance and Governance, providing the ability to discover and Exchange a near limitless combination of data at a record pace. Together with our partners in life sciences, government and insurance, we are Synchronizing the Science. To learn more about HealthVerity, visit </span><a href="http://healthverity.com/" style="font-size: 14.6667px" class="postings-link">healthverity.com</a><span style="font-size: 14.6667px">.</span></div><div><br></div><div><b style="font-size: 18px">Why you'll love working here</b></div><div><br></div><div><b>We are making a difference </b>– Our technology is at the forefront of some of the biggest healthcare challenges in the world.&nbsp;</div><div><b>We are one team</b> – Our people define our culture and always will. We take time out to celebrate each other at the end of every week through company-wide shout outs, and acknowledge the value that each of us adds towards our greater mission. Come share all you have to offer.</div><div><b>We are learners</b> – Every team member is continually learning, no matter if we've been in a role for one year or much longer. We are committed to learning and implementing what is best for our clients, partners, and each other.</div><div><br></div><div><b style="font-size: 18px">Benefits &amp; Perks</b></div><div>•&nbsp;Compensation: competitive base salary &amp; annual bonus opportunity (for non-commissioned roles)</div><div>•&nbsp;Benefits: comprehensive benefits with coverage on Day 1, medical, dental, vision, 401k, stock options</div><div>•&nbsp;Flexible location: our HQ is in Philadelphia. We offer both hybrid roles and those with quarterly travel. </div><div>•&nbsp;Generous PTO: Take time off as needed, targeted at 4 weeks per year, including vacation, personal and sick time, plus paid maternity and paternity leave.</div><div>•&nbsp;Comprehensive and individualized onboarding: mentorship program, departmental talks, and a library of resources are available beginning day 1 for each new team member to minimize the stress of starting a new job</div><div>•&nbsp;Professional development: biweekly 1:1s, hands-on leadership that is goal-and growth-oriented for each team member, and an annual budget to support professional development pursuits</div><div><br></div><div><br></div><div>HealthVerity is an equal opportunity employer devoted to inclusion in the workplace. We believe incorporating different ideas, perspectives and backgrounds make us stronger and encourages an environment where ageism, racism, sexism, ableism, homophobia, transphobia or any other form of discrimination are not tolerated. All qualified&nbsp;job&nbsp;applicants will be given consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, protected veteran status, or on the basis of disability.&nbsp;At HealthVerity, we’re working towards an innovative and connected future for healthcare data and believe the future is better together. We can only do that if everyone has a seat at the table. <a href="https://info.healthverity.com/hubfs/EIDC%20statement%20(6_2021).pdf" class="postings-link">Read our Equity Inclusion and Diversity Statement</a>.</div><div><br></div><div>If you require a reasonable accommodation in completing this application, interviewing, completing any pre-employment testing, or otherwise participating in the employee selection process, please direct your inquiries to <a href="mailto:careers@healthverity.com" class="postings-link">careers@healthverity.com</a></div><div><br></div><div>Remote opportunities are not available in all areas and require team members to work from a fixed location due to tax and labor law implications - specific questions about remote positions can be discussed during the interview process with your recruiter. </div>

Location: Philadelphia, Pennsylvania

  

Employment Type: Full-time

  

Team: Engineering Security

  

How you will help

As a part of our SecOps team, you will be at the front line of our security
compliance, monitoring, risk assessment, escalation and remediation processes.
This is a multi-grade position. Your assigned job title will be commensurate
with your level of knowledge and experience. You will work directly with the
Vice President to manage FedRAMP and other compliance activities.  You will
own identification and tracking for actions required to mitigate and/or
remediate security risks to protect company assets.  

  

What you will do

• Identify and track FedRAMP-required recurring activities to ensure timely
completion within required timeframes

• Coordinate and collaborate with Engineering peers to plan, schedule and
execute compliance required actions are completed on time

• Assist with identifying and implementing needed and recommended policy and
procedure changes

• Lead preparation, planning and completion of third party assessment
organization (3PAO) assessment activities

• Identify required security patches and updates based upon subscribed feeds
and vulnerability scanning results

• Complete security questionnaires and respond to customer inquiries regarding
the product and organizational security

• Complete third party risk assessments and identify risks that need to be
managed to uphold our security posture and standards

• Maintain and/or create incident response, contingency planning and related
documentation to support disaster recovery for security incident and event
response

• Occasionally assist with managing and triaging operational security issues
and events

• Occasionally assist with secure development, infrastructure and endpoint
engineering activities as needed

  

About You

• You make security a priority in everything you do

• You have a basic familiarity with HIPAA Security Rule requirements and the
NIST 800-53 cyber security framework

• You have at least (1) or more years of prior experience supporting a FedRAMP
security program

• You are familiar with scalable and/or cluster compute architectures and have
a basic understanding of AWS secure architecture practices

• You have some prior experience with security anomaly detection, logging,
monitoring and vulnerability management tools and how to use them to protect,
detect, respond and recover from security incidents

• You keep up to date on data science tools and distributed computing
methodologies

  

Desired Skills and Experience

• You have some prior Linux system administration experience performing
patching, configuration management, and vulnerability remediation

• You have some experience with Shell scripting, Python, Ruby, or similar
languages

• You’ve administered and are familiar with Nmap, Nessus, OpenVPN, tcpdump,
OpenSSL and other related security tools

• You have a good understanding of data network configuration and
infrastructure concepts, including TCP/IP, DNS, routers,
internet/intranet/extranet, firewalls, web servers and security hierarchy
including the application of encryption key infrastructures and authentication
processes

• You have one or more security certifications demonstrating your knowledge
and commitment to the security field

  

Base salary for the role is commensurate with experience and can range between
$65,000 - 190,000 + annual bonus opportunity.

  

  

 **Hiring Locations**

While HealthVerity does support remote work with quarterly travel to our
Philadelphia headquarters, our strong preference is to hire team members in
the areas below as well as approved states in the Eastern Time Zone. Expansion
beyond these markets will occur only when necessary.

  

• Boston, Massachusetts

• New York City, New York

• Philadelphia, Pennsylvania

• Baltimore, Maryland

• Washington D.C

• Charlotte, North Carolina

• Raleigh-Durham, North Carolina

• Atlanta, Georgia

  

Approved States in the Eastern Time Zone include: CT, DE, FL, GA, IN, MA, MD,
MI NC, NJ, NY, OH, PA, RI, TN, and VA.

  

 **About HealthVerity**

HealthVerity synchronizes transformational technologies with the nation’s
largest healthcare and consumer data ecosystem to power previously
unattainable outcomes and fundamentally advance the science. We offer a
comprehensive, yet flexible approach, based on the foundational elements of
Identity, Privacy, Governance and Exchange (IPGE), that synchronizes
unparalleled Identity management with built-in Privacy compliance and
Governance, providing the ability to discover and Exchange a near limitless
combination of data at a record pace. Together with our partners in life
sciences, government and insurance, we are Synchronizing the Science. To learn
more about HealthVerity, visit [healthverity.com](http://healthverity.com/).

  

 **Why you'll love working here**

  

 **We are making a difference** – Our technology is at the forefront of some
of the biggest healthcare challenges in the world.

 **We are one team** – Our people define our culture and always will. We take
time out to celebrate each other at the end of every week through company-wide
shout outs, and acknowledge the value that each of us adds towards our greater
mission. Come share all you have to offer.

 **We are learners** – Every team member is continually learning, no matter if
we've been in a role for one year or much longer. We are committed to learning
and implementing what is best for our clients, partners, and each other.

  

 **Benefits & Perks**

• Compensation: competitive base salary & annual bonus opportunity (for non-
commissioned roles)

• Benefits: comprehensive benefits with coverage on Day 1, medical, dental,
vision, 401k, stock options

• Flexible location: our HQ is in Philadelphia. We offer both hybrid roles and
those with quarterly travel.

• Generous PTO: Take time off as needed, targeted at 4 weeks per year,
including vacation, personal and sick time, plus paid maternity and paternity
leave.

• Comprehensive and individualized onboarding: mentorship program,
departmental talks, and a library of resources are available beginning day 1
for each new team member to minimize the stress of starting a new job

• Professional development: biweekly 1:1s, hands-on leadership that is goal-
and growth-oriented for each team member, and an annual budget to support
professional development pursuits

  

  

HealthVerity is an equal opportunity employer devoted to inclusion in the
workplace. We believe incorporating different ideas, perspectives and
backgrounds make us stronger and encourages an environment where ageism,
racism, sexism, ableism, homophobia, transphobia or any other form of
discrimination are not tolerated. All qualified job applicants will be given
consideration for employment without regard to race, color, religion, sex,
sexual orientation, gender identity, national origin, protected veteran
status, or on the basis of disability. At HealthVerity, we’re working towards
an innovative and connected future for healthcare data and believe the future
is better together. We can only do that if everyone has a seat at the table.
[Read our Equity Inclusion and Diversity
Statement](https://info.healthverity.com/hubfs/EIDC%20statement%20$6_2021$.pdf).

  

If you require a reasonable accommodation in completing this application,
interviewing, completing any pre-employment testing, or otherwise
participating in the employee selection process, please direct your inquiries
to [careers@healthverity.com](mailto:careers@healthverity.com)

  

Remote opportunities are not available in all areas and require team members
to work from a fixed location due to tax and labor law implications - specific
questions about remote positions can be discussed during the interview process
with your recruiter.

