Sr. Information Security Engineer
New
J
JobgetherHealthcare technology
Remote work opportunity within the United States.Full-TimeSenior
Salary140,000 - 160,000 USD per year
Apply NowOpens the employer's application page
Job Details
- Experience
- 5+ years of experience in security engineering or comparable technical security roles.
- Required Skills
- AWSPythonAzureHIPAA
Requirements
- Bachelor’s degree in Computer Science, Information Security, or a related field, or equivalent professional experience.
- 5+ years of experience in security engineering or comparable technical security roles.
- Strong knowledge of cloud-native security across AWS, Azure, and GCP, and modern SaaS architectures.
- Hands-on experience with SIEM, EDR/XDR, IAM, vulnerability management, security automation, and incident response technologies.
- Practical experience securing containerized and serverless workloads such as EKS and Lambda.
- Familiarity with HIPAA, HITRUST, NIST, and SOC 2.
- Strong scripting capabilities in Python, PowerShell, Bash, or similar languages.
- Experience with AI/LLM security, AI threat modeling, ML security, or securing AI-enabled applications is highly valuable.
- Experience with infrastructure-as-code security using Terraform, Ansible, or CloudFormation is preferred.
- Experience integrating security into DevSecOps environments and CI/CD pipelines, including tools such as Jenkins or Bitbucket, is preferred.
- Certifications such as CISSP, CISM, CCSP, AWS Security Specialty, GSEC, GCIA, or GCIH are preferred.
- Ability to explain complex technical and security concepts to non-technical stakeholders.
Responsibilities
- Design, implement, and maintain secure architectures across AWS, Azure, and GCP, including infrastructure-as-code and policy-as-code controls.
- Deploy and manage cloud security capabilities and CSPM/CNAPP platforms to identify cloud risks.
- Secure containerized and serverless workloads, including EKS, ECS, and Lambda.
- Partner with AI and data teams to secure model development, training, fine-tuning, inference, and retrieval-augmented generation pipelines.
- Apply AI security frameworks and threat modeling to address AI-specific threats, and implement AI gateways, guardrails, and monitoring controls.
- Embed security into CI/CD pipelines through security testing, scanning, threat modeling, and secure design reviews.
- Protect APIs and machine-to-machine integrations, and manage software supply-chain security.
- Strengthen PHI and PII protection through data classification, tokenization, de-identification, DLP, and access controls.
- Monitor and investigate security alerts, coordinate incident response, and develop detection content, runbooks, and automated response capabilities.
- Support security audits, customer assessments, vendor risk reviews, and security awareness initiatives.
View Full Description & ApplyYou'll be redirected to the employer's site
