Job Description

The Staff Security Engineer - Forensic Engineer at Aledade will play a critical role in protecting sensitive healthcare data and ensuring compliance with regulatory requirements. You will lead complex digital forensic investigations, support incident response efforts, and enhance our forensic readiness across a cloud-native environment. This is a high-impact role that supports our mission to safeguard patient privacy and clinical data while maintaining operational integrity.

• Lead investigations into security incidents involving PHI/PII across endpoints, networks, SaaS platforms, and cloud infrastructure.
• Perform forensic analysis to determine the scope, impact, and root cause of security breaches or data loss events.
• Develop and maintain investigation procedures, forensic toolkits, and evidence handling practices aligned with industry and regulatory standards.
• Partner with Legal, Privacy, and Compliance teams on HIPAA-related investigations and e-discovery matters.
• Produce detailed investigation reports for internal stakeholders, regulators, and executive leadership.

• BS/BTech (or higher) in Computer Science, Information Technology, Cybersecurity or a related field, 10 years security domain experience without degree.
• 8+ years of experience in digital forensics, incident response, or security engineering, preferably in SaaS or healthcare.

• Domain Specific Experience: Digital Forensics
• Strong expertise in cloud forensic investigations (AWS, Azure, or GCP), including container environments (e.g., Kubernetes).
• Hands-on experience with tools such as EnCase, Velociraptor, X-Ways, Volatility, or similar.
• Understanding of HIPAA, HITECH, and other relevant healthcare security and privacy standards.
• Solid knowledge of operating systems, file systems, memory structures, and log analysis.
• Proficiency in scripting and automation (e.g., Python, PowerShell, Bash) to streamline investigations.
• Strong written and verbal communication skills; able to present complex findings to diverse audiences.
• Relevant certifications preferred: GCFA, GCFE, EnCE, CHFI, or similar.
• Knowledge of HITRUST, SOC 2, or ISO 27001 control frameworks.
• Background in threat hunting or malware analysis.

Job Tags

Similar Jobs