Security Engineer (Remote, 1099 Contract-to-Hire)

Security Engineer — Remote | 6-Month Contract-to-Hire | 1099 Only

Our client, a healthcare organization subject to both HIPAA and Sarbanes-Oxley (SOX) requirements, is seeking a Security Engineer to design, implement, and maintain its security infrastructure. This role leads complex security projects, identifies and mitigates threats, and ensures that networks and systems meet industry and regulatory standards. You will collaborate with IT, finance, compliance, and legal teams to safeguard sensitive healthcare and financial data.

Engagement: 100% remote (US-based) | 6 months contract-to-hire | 1099 only (no W-2, no C2C) | $45–$50/hr

Responsibilities

• Lead the architecture, design, and implementation of security solutions: firewalls, intrusion detection/prevention, encryption, and other core security infrastructure.
• Ensure the security architecture meets HIPAA, SOX, and related healthcare compliance requirements; support audits and implement controls.
• Lead incident response — detection, containment, eradication, and recovery — with minimal business disruption.
• Conduct recurring risk assessments, vulnerability testing, and internal/external audits.
• Partner with IT, finance, compliance, and legal to integrate security controls into projects, including SOX-related financial reporting systems.
• Implement and manage security monitoring tools; report on security posture and compliance status to senior leadership.
• Track emerging threats and technologies to continuously strengthen the security program.
• Ensure encryption and security protocols protect patient and financial data from unauthorized access.
• Mentor junior security staff.

Required Qualifications

• Bachelor's degree in Information Technology, Computer Science, Cybersecurity, or related field.
• 5+ years of security engineering experience, including work in healthcare or another regulated industry.
• CISSP, CISM, or CEH certification required.
• Proven experience maintaining HIPAA and SOX compliance.
• Expertise in cloud infrastructure and cloud security in a regulated environment.
• Deep knowledge of firewalls, SIEM, encryption, and network security tooling.
• Strong analytical, project management, and communication skills for technical and non-technical audiences.

Work Authorization: s, s, andholders able to work directly on a 1099 basis. Third-party / corp-to-corp submissions will not be considered.