Security Engineer - Threat & Vulnerability Management

At Commure, our mission is to simplify healthcare. We have bold ambitions to reimagine the healthcare experience, setting a new standard for how care is delivered and experienced across the industry. Our growing suite of AI solutions spans ambient AI clinical documentation, provider copilots, autonomous coding, revenue cycle management and more all designed for providers & administrators to focus on what matters most: providing care.

Healthcare is a $4.5 trillion industry with more than $500 billion spent annually on administrative costs, and Commure is at the heart of transforming it. We power over 500,000 clinicians across hundreds of care sites nationwide more than $10 billion flows through our systems and we support over 100 million patient interactions. With new product launches on the horizon, expansion into additional care segments, and a bold vision to tackle healthcares most pressing challenges, our ambition is to move from upstart innovator to the industry standard over the next few years.

Commure was recently named to Fortune s Future 50 list for 2025 and is backed by world-class investors including General Catalyst, Sequoia, Y Combinator, Lux, Human Capital, 8VC, Greenoaks Capital, Elad Gil, and more. Commure has achieved over 300% year-over-year growth for the past two years and this is only the beginning. Healthcares moment for AI-powered transformation is here, and were building the technology to power it. Come join us in shaping the future of healthcare.

About the Role

Security Platform Engineer

Splunk, SumoLogic, Wiz, CrowdStrike, Okta, and Trustwave

Key Responsibilities

• Manage, integrate, and optimize the existing multi-vendor security ecosystem to ensure unified threat visibility and response.

• ELK-based SIEM platform

• data ingestion pipelines

• AI/ML models

• Drive platform migration strategy from commercial SIEMs to an in-house security platform with minimal disruption.

• Collaborate with Security Operations (SOC) and Engineering teams to define security monitoring standards, correlation rules, and incident response workflows.

• Lead automation initiatives to improve detection accuracy, reduce alert fatigue, and accelerate response times.

• Ensure alignment with compliance and data privacy frameworks (SOC 2, HIPAA, GDPR, PCI-DSS).

Required Technical Skills

Security Platforms & Operations

• SIEM platforms

• EDR/XDR

• incident response, log management, and threat hunting workflows

Infrastructure & Automation

• ELK Stack

• Terraform, Ansible, Docker, and Kubernetes

• Python

AI/ML & Data Engineering

• TensorFlow, PyTorch

• Kafka/Kinesis

• data pipelines

Query & Programming Skills

• SPL, KQL

• Go, Rust, or Java

Qualifications & Experience

• Computer Science, Information Security, or related field

• security engineering, platform engineering, or security operations

• Proven experience architecting or migrating large-scale security platforms.

• MITRE ATT&CK framework

• Excellent documentation, presentation, and cross-functional collaboration skills.

Preferred:

• CISSP, GIAC, OSCP, or CISM

• AI-driven security platforms

• regulated industries (e.g., healthcare, fintech)

The Ideal Candidate

innovation with operational stability

Commure is committed to creating and fostering a diverse team. We are open to all backgrounds and levels of experience, and believe that great people can always find a place. We are committed to providing reasonable accommodations to all applicants throughout the application process.

@

Employees will act in accordance with the organization s information security policies, to include but not limited to protecting assets from unauthorized access, disclosure, modification, destruction or interference nor execute particular security processes or activities. Employees will report to the information security office any confirmed or potential events or other risks to the organization.