Senior Security Engineer — Beachwood, OH

Protect what matters most. Join our team to implement and enhance security solutions that safeguard critical systems, data, and infrastructure while driving innovation across the organization.

We’ve been recognized by Newsweek and Plant-A Insights Group as one of America’s Most Admired Workplaces for 2026! As an employee recently said, “I feel I have a lot of support. I feel like part of the team.”

Position Summary:

The primary purpose of the Senior Security Engineer is to harden and protect the Company's Windows and Microsoft 365 infrastructure across all Communities and corporate locations. This is a hands-on engineering role focused on Active Directory and Entra ID security, privileged access, endpoint protection, patch and exposure management, and security monitoring, with the CrowdStrike Falcon platform as the principal toolset, and delivers the technical work in the Company's security plan.

Education/Qualifications:

• Must have a bachelor's degree in Cybersecurity, Information Systems, Computer Science, or a related field of science or learning, or must acquire advanced knowledge, which is predominantly intellectual in character and requires the consistent exercise of discretion and judgment, through a demonstrated equivalent combination of prolonged education and progressive work experience pertaining to specialized intellectual instruction for the skills of the position.

• Seven (7) or more years of progressive experience in systems or security engineering in a Windows enterprise environment, including at least three (3) years in a role with security as the primary responsibility.

• CrowdStrike Certified Falcon Administrator (CCFA) is required at hire or must be obtained within six (6) months of hire. One (1) or more of the following is preferred: CrowdStrike Certified Falcon Responder (CCFR), Microsoft SC-200 or SC-300, GIAC GCAD, SSCP, or similar.

• Must have a valid driver's license and the ability to travel occasionally to Communities and corporate locations.

• Hands-on experience hardening Active Directory and Windows Server, including Group Policy, Credential Guard, LSA Protection, Windows LAPS, and NTLM restrictions.

• Experience implementing privileged access controls, including tiered administration, role-based access, privileged access workstations, and jump hosts.

• Hands-on experience administering the CrowdStrike Falcon platform in production, including sensor deployment and health, host and prevention policy groups, and detection exclusions. Experience with Falcon Identity Protection, Falcon Next-Gen SIEM, or the Falcon Complete managed service is strongly preferred.

• Experience securing Microsoft 365 and Entra ID, including Conditional Access, multi-factor authentication enforcement, and privileged role management.

• Experience deploying endpoint security configuration at scale through Intune or Group Policy, including Defender Attack Surface Reduction rules and Tamper Protection.

• Experience running patch and vulnerability management across a Windows enterprise, including operating system and third-party application patching through Intune, WSUS, or Configuration Manager, vulnerability scanning, and risk-based remediation tracked against defined timelines. Experience with CrowdStrike Falcon Exposure Management is strongly preferred.

• Experience working with a managed detection and response or managed SOC provider on alert triage, escalation, and incident response.

• Experience with PKI implementation and administration.

• Previous experience in a healthcare or other HIPAA-regulated environment, and in a multi-site environment, is preferred.

• Experience with SIEM detection engineering, and with backup immutability and restore testing, is preferred.

Roles and Responsibilities:

• Lead hardening of identity and privileged access. Lock down Active Directory and Windows Server (Credential Guard, LAPS, NTLM restrictions), tighten service accounts, and enforce MFA across VPN and RDP.

• Own the CrowdStrike Falcon platform end to end. Deploy, tune, and maintain EDR, Identity Protection, and Next-Gen SIEM across all endpoints and servers, including tailored policies for clinical workstations and medication carts.

• Build detections that catch real threats. Create alerts for lateral movement, credential misuse, and data exfiltration, and act as the technical partner to our managed detection and response provider during triage and incident response.

• Run patch and exposure management. Drive a staged patching program for operating systems, applications, and firmware, and prioritize vulnerabilities by exploitability and business impact using Falcon Exposure Management.

• Protect sensitive data and keep recovery reliable. Audit file share and SharePoint permissions, specify egress controls against unauthorized uploads, and help make backups immutable with tested restores.

• Balance security with resident care. Work with clinical leaders, Community staff, and vendors so controls protect the organization without disrupting care, including onsite visits to Communities.

Advantages:

• Make a Difference – Be part of a team that strengthens AI processes to ensure and support quality resident care.

• Comprehensive Benefits – Health, dental, vision, and retirement plans.

• Generous PTO – Work-life balance with paid time off and holidays.

• Team-Oriented Culture – Work with dedicated professionals who value excellence.

• Stability – Join an organization with a proven track record in skilled nursing care.

Benefits and Perks*:

• Benefit eligibility the first of the month following 30 days

• Comprehensive benefit packages including medical, dental, and vision, and more. Health Savings Account available with employer contribution.

• 401K through Fidelity

• Employer-paid life insurance (FT employees)

• Robust Employee Assistance Program

• Generous Paid Time Off (PTO)

• Educational, leadership, and tuition opportunities

• Various discount programs offered, including discounted childcare programs through Kindercare

• Wellness programs offered through WebMD

• Employee recognition programs

• Culture of employees creating an IMPACT!

• Program details can vary amongst buildings. Please see HR for the facility-specific benefit plans.

We are an Equal Opportunity Employer. All persons shall have the opportunity to be considered for employment without regard to their actual or perceived gender, race, color, national origin, religion, disability, age, military or veteran status, or any other characteristic protected by applicable federal, state or local laws and ordinances.