Cybersecurity Engineer

Cybersecurity Engineer

About DrFirst

For 25 years, DrFirst has empowered providers and patients to achieve better health through intelligent medication management. We improve healthcare workflows and help patients start and stay on therapy with end-to-end solutions that enhance prescription access, affordability, and adherence. Our solutions help 100 million patients a year and are used by more than 420,000 prescribers, 71,000 pharmacies, 270 EHRs and health information systems, and over 2,000 hospitals in the U.S.

Position Overview

We're seeking a proactive Cybersecurity Engineer to strengthen our security posture across audit compliance, cloud infrastructure, corporate security support, and AI-driven security initiatives. This role requires deep technical expertise, project management skills, and the ability to collaborate effectively across teams.

Who will love this job

• An Innovator: who thinks outside the box to introduce new methods, ideas, and products
• A Problem solver: who is passionate about using technology to solve complicated problems, and harnessing the power of data to adopt new tactics to enhance efficiency and scalability
• A Team builder: who enjoys coaching developers, product owners and other security team members in understanding security principles; attracting and retaining A-players
• A Trusted advisor: someone with strong leadership acumen who always strives to do better tomorrow than today, and continuously improve DrFirst security program
• A Driver: who works with purpose and passion; someone who will elevate our technical teams through new perspectives, ideas, and solutions
• A Collaborator: who can navigate internal teams together to deliver best in class products contributing to DrFirst’s market share and profitability targets.

What you will work on

• Audit Leadership (25%): Work with cross-org stakeholders to implement and monitor AI-specific controls based on NIST AI 600 and HITRUST AI Certification
• Lead evidence collection for certified audits using security read-only access to production systems
• Coordinate