About Us 
We are the leading player in the SaaS analytics and workflow space for dental practices, launched in 2015 to help dentists manage and grow their practices. Our best-in-class tech makes it more fulfilling to be a dental professional and easier to be a patient. Nearly 9,000 dental practices utilize our platform to practice smarter, generating an average top-line production increase of 50% in the first 12 months. Whether a practice wants a comprehensive 2-year growth plan or simply a more effective Morning Huddle, we take the busy work out of growth. Our platform helps practices find patients, schedule them, follow up, collect payments, file their forms, design their treatment plans, and so much more. We seek an individual with passion and experience in Security & Compliance who can contribute to our organization. If the profile below sounds like you, let's talk!

What You'll Do 
As a Security Specialist at Dental Intelligence, you are passionate about Cybersecurity/ Information Security with a focus on HIPAA, SOC 2, Privacy, and PCI DSS standards. This position is in Pleasant Grove, Utah with hybrid work from home days available and will report to the Senior Manager of Security & Compliance. Although this role is an individual contributor, there is significant cross-functional collaboration with varying levels of responsibility and leadership. A candidate will feel successful in this role if they are a self-starter that is motivated to work efficiently under limited supervision, open to continuous improvement efforts, is accountable, and is a friendly team player.

We are seeking a technically skilled Information Security professional with prior experience to support and advance our Cybersecurity operations. This role will focus on assessing and implementing technical controls, conducting vulnerability assessments, as well as performing detailed analyses to protect systems that process sensitive patient health and payments data. The candidate will work with cross-functional teams to strengthen application security, ensure robust system protection, and enforce security standards across the organization.

Outcomes You'll Own

1. Security Operations:

• Utilize a variety of Security tools such as intrusion detection systems (IDS), endpoint detection (EDR), firewalls, DNS filtering, and Audit Logging/SIEM platforms, CSPM, SAST/DAST, etc.
• Perform weekly patch management reviews, including testing, deployment coordination with Systems & IT, and reporting.
• Support and collaborate with the Compliance team with Security related controls of HIPAA, SOC 2, PCI DSS, Privacy, etc.
• Risk Assessments and Vendor/Software assessments

1. Vulnerability Management and Application Security:

• Coordinate penetration testing and remediation efforts.
• Utilize security testing tools, such as Tenable & Aikido, to perform scanning of code, containers, domains, APIs, etc.
• Collaborate with product owners, software developers, and systems engineering to implement and track security remediations.
• Track and analyze Open Source Software security concerns, and report potential licensing issues to Compliance.

1. Security Education, Training, and Awareness (SETA):

• Foster a positive culture of compliance and reporting through rapport building and awareness activities.
• Design and deliver advanced security training modules.
• Leverage threat intelligence to create tailored awareness campaigns targeting emerging risks.

1. Incident Detection and Response:

• Participate in identifying, analyzing, and responding to real-time security incidents.
• Support efforts to identify root causes, create detailed incident reports, and After Action Reports.

1. Documentation and Reporting:

• Maintain documentation for security configurations, tools, and processes.
• Contribute to developing detailed security policies, playbooks, internal audit plans, and risk assessments.

What will make us REALLY Love you:

• Bachelor’s degree in Cybersecurity, Information Technology, or a related technical field, or equivalent practical experience.
• Minimum of 2 years in a hands-on InfoSec/Cybersecurity role, including exposure to vulnerability management, network defense, and/or application security.
• Familiarity with operating security tooling, vulnerability scanners, and endpoint detection tools.
• Familiarity with healthcare and/or payments related SaaS
• Blue team/Red Team
• Knowledge & Skills:
• Familiarity with frameworks like HIPAA Security Rule, PCI DSS, NIST CSF, ISO 27001, or CIS Controls.
• Strong understanding of networking, system hardening techniques, and common attack vectors.
• Knowledge of secure coding practices and ability to perform reviews for security flaws.
• Strong understanding of protecting cloud and on-premise data infrastructures.
• How to use scripting or automation tools for streamlining security operations.

Helpful Certifications:

• CompTIA Security+
• Certified Ethical Hacker (CEH)
• GIAC Security Essentials (GSEC)
• CYSA+, A+, Network+, or equivalent.

What You'll Love About Us

• Flexible Time Off + 11 paid holidays
• Competitive Medical, Dental & vision offerings, including free medical premiums for employees, with buy up plan options, AND we match your HSA contributions.
• Company sponsored Life, Disability & AD&D
• Mental Health support programs, Cellphone & Gym membership Discounts
• 100% Paid Parental Leave
• 401K Retirement savings plan with company match up to 5.5% + unlimited access to financial advisors.
• Tuition Reimbursement program
• Flexible work location for most roles (in-office, work-from-home, or hybrid)