Cybersecurity Engineer II
Cybersecurity Engineer II at Hanger, Inc. secures and integrates technology environments of acquired companies across the full M&A lifecycle — due diligence, compromise assessment and threat hunting, Day 1 controls, cloud hardening, and remediation — working with Azure, AWS, Active Directory/Entra ID, EDR, SIEM, and PowerShell/Python automation.
- Compensation
- $110.4K–$138K / yr
- Location
- US
- Work setup
- Not specified
- Seniority
- Middle
- Employment
- Part time
- Experience
- 5+ years
- Category
- Security
- Posted
Skills
Must have
- 5+ years of experience in cybersecurity, security engineering, cloud security, or a related field, including hands-on technical assessment and remediation work
- Bachelor's degree in Computer Science, Cybersecurity, Information Technology, or a related field, or equivalent work experience
- Hands-on experience securing Active Directory, Microsoft Entra ID, and cloud environments, including Azure and AWS
- Experience deploying and supporting enterprise security tooling such as EDR, SIEM, email security, firewalls, IDS/IPS, vulnerability scanning, and identity governance platforms
- Experience identifying and remediating vulnerabilities and security misconfigurations
- Valid driver's license (or eligible to obtain) with driving record within Hanger's Motor Vehicle Safety Policy standards
- Ability to perform log analysis, incident investigation, and threat hunting using monitoring and detection tools
- Strong knowledge of identity and access management, endpoint security, cloud security, vulnerability management, network protocols, system hardening, and security architecture fundamentals
- Ability to use PowerShell, Python, or similar languages to automate security and identity workflows
- Working knowledge of the HIPAA Security Rule and security frameworks such as NIST CSF 2.0 and NIST SP 800-53
- Strong analytical problem-solving and clear written/verbal communication, including translating technical findings for non-technical and executive audiences
- Ability to travel to acquired-company and clinic locations as needed
Nice to have
- Experience supporting mergers, acquisitions, divestitures, or large-scale technology integrations
- Experience with compromise assessments, threat hunting, technical due diligence, or third-party security assessments
- Healthcare industry experience, including protecting PHI, securing EHR and practice management systems, connected medical device risk, and Business Associate Agreements
- Experience securing enterprise applications and cloud-hosted environments
- Experience consolidating identities, endpoints, and email tenants from acquired companies into an enterprise environment
- Experience with HIPAA, PCI DSS, ISO/IEC 27001, or SOC 2 control environments
- Project management skills and ability to manage multiple integration workstreams concurrently
- Security and cloud certifications such as CISSP, CCSP, GSEC, Security+, Microsoft SC-500, AWS Certified Security – Specialty, or CCSK
- Incident response certifications such as GCIH or GCFA
Full description
Why Us?
With a mantra of Empowering Human Potential, Hanger, Inc. is the world's premier provider of orthotic and prosthetic (O&P) services and products, offering the most advanced O&P solutions, clinically differentiated programs and unsurpassed customer service. Hanger's Patient Care segment is the largest owner and operator of O&P patient care clinics nationwide. Through its Products & Services segment, Hanger distributes branded and private label O&P devices, products and components, and provides rehabilitative solutions to the broader market. With 160 years of clinical excellence and innovation, Hanger's vision is to lead the orthotic and prosthetic markets by providing superior patient care, outcomes, services and value. Collectively, Hanger employees touch thousands of lives each day, helping people achieve new levels of mobility and freedom.
Could This Be For You?
The Cybersecurity Engineer II is responsible for assessing, securing, and integrating technology environments associated with mergers and acquisitions across Hanger's national network of patient care clinics and business operations. Working across the full deal lifecycle, from pre-close due diligence through Day 1 stabilization and post-close integration, this role performs hands-on security engineering, technical assessments, compromise assessment and threat hunting, remediation, and implementation of enterprise security controls across acquired environments.
The Cybersecurity Engineer II partners with Hanger’s corporate Security leadership team to translate technical findings into clear, business-focused risk reporting that informs deal decisions and integration priorities, and helps ensure that protected health information (PHI) and critical clinical and business systems in acquired companies are brought up to enterprise security and compliance standards.
Your Impact
Due Diligence and Assessment
- Pre-Close Due Diligence: Support pre-close security due diligence by reviewing target-company security documentation, questionnaire responses, incident and breach history, and external attack surface to identify deal-impacting risks and inform integration planning.
- Technical Assessments: Perform technical security assessments across on-premises, cloud, and hybrid environments.
- Compromise Assessment and Threat Hunting: Conduct or coordinate compromise assessments and threat hunting in acquired environments before network interconnection, looking for indicators of compromise, persistence mechanisms, unauthorized or stale accounts, and anomalous authentication activity.
- Vulnerability Assessment: Conduct vulnerability assessments, coordinate penetration testing of acquired systems, and drive remediation of identified security gaps and misconfigurations.