We’re looking for a Mid/Senior Security Engineer to help build a modern technology organization where security is integrated into how we design, deploy and operate our systems. You’ll do more than identify vulnerabilities: you’ll help create more secure environments, automate controls and make security a natural part of the development lifecycle.

At PMG, technology is becoming a strategic capability that helps us collaborate more effectively, work more efficiently and simplify daily life for our teams and, ultimately, improve our patients’ experience. Over the past few years, we’ve built a stronger foundation: more robust infrastructure, improved security, more structured development and operations practices, greater automation, and a more integrated approach to our data and tools. We’re now looking to strengthen the team, refine how we work and increase our ability to deliver value quickly and reliably.

• Design and improve security controls in AWS and Azure.
• Participate in architecture and code reviews to identify risks early in the design process.
• Secure integrations between applications, APIs, cloud services and enterprise systems.
• Integrate security into CI/CD pipelines, including code, dependency and secret scanning, Infrastructure as Code, and container image scanning.
• Conduct security assessments, vulnerability assessments and targeted penetration tests.
• Review identity and access management (IAM), secrets management, network security, logging, monitoring and cloud configurations.
• Work with development teams to address issues at their source and reduce security debt.
• Contribute to threat detection, incident response and the continuous improvement of our security posture.
• Develop or improve tools that make security simpler, measurable and repeatable.

• At least 5 years of relevant experience in application security, DevSecOps, cloud security or security engineering.
• Strong hands-on experience with AWS and Azure in production environments.
• Practical experience with GitHub, development workflows and integrating security controls into CI/CD pipelines.
• Ability to read, understand and review code to identify application security risks.
• Good understanding of networking, IAM, secrets management, logging, monitoring and cloud architecture.
• Experience in penetration testing, vulnerability management or security testing, with the ability to prioritize real-world risks.
• Good understanding of APIs, integrations, authentication, authorization and containerized environments.
• Ability to automate using scripts or code and turn security issues into lasting solutions.