Good enough isn’t for us. Duly Health and Care’s team members show up every day driven to exceed expectations. We see and support the remarkable in every person within and beyond the walls of our work.

Duly Health and Care works to understand what matters most to you. We recruit and retain team members who share a relentless passion and pride for helping others live happier and healthier lives. We invest in helping our team members develop their talents in a way that is rich in personal meaning. We invite you to join us, fulfill your purpose and make your mark!

• Comprehensive medical and prescription drug benefits that include medical coverage at 100% (after deductible) when utilizing a Duly provider.
• $5,250 Tuition Reimbursement per year.
• 40 hours paid volunteer time off.
• A culture committed to Diversity, Equity, and Inclusion (DEI) and Social Impact
• Wellness program that includes complimentary subscriptions to Noom and Calm apps.
• 12 Weeks parental leave at 100% pay and a financial benefit for adoption and surrogacy for non-physician team members.
• 401(k) Match
• Profit-sharing program

• Protect the integrity and confidentiality of Duly data and infrastructure while enabling business functionality in all systems and environments.
• Select, configure and manage a portfolio of world-class cybersecurity tools and services.
• Lead incident response activities and provide timely response to security incidents and alerts generated by security tools or the SOC
• Assist in improving processes, identify efficiencies, and recommend solution enhancements to improve service level delivery
• Support risk assessments, internal and external Information Security Audits, and Vendor reviews
• Champion vulnerability remediation efforts and act as a liaison to IT and application owners for patch management
• Provide Level II Support for incident and request tickets escalated from other technical teams
• Gather and report on key organizational information security metrics
• Other duties as assigned

• Bachelor's degree in discipline appropriate to assignment or an equivalent combination of education and experience
• At least 2 years’ experience in an Information Security role.
• Ability to evaluate business processes, IT technology, identify security risks, process gaps, and evaluate IT controls
• Organizational skills to prioritize risks and actions using a risk-based approach
• Manage technical projects working across multiple lines of business with multiple stakeholders
• Understanding of industry security standards, guidelines, and regulatory/compliance requirements related to information security such as ISO 27001, NIST 800-53, SOC2, PCI, SOX, etc.
• Extensive experience working with and managing Active Directory, Managed Security Providers (e.g. Rapid7, Artic Wolf, SecureWorks), Microsoft Azure/Defender/Sentinel/Intune, SIEM/SOAR tools.
• Knowledge of networking protocols and concepts including TCP, DNS, DHCP, Firewalls, VPN, and Web proxies
• Understanding of email tran
• smission, routing, and authentication concepts including, SMTP, SPF, DKIM and DMARC
• Understanding of vulnerability assessment and patch management practices
• Demonstrated incident response experience including dealing with malware and endpoint anti-virus and detection and response solutions
• Excellent communication skills (both written and verbal)
• Related certifications (e.g., GSEC, CISSP, AWS) preferred