Staff Cloud Security Engineer

JobgetherDigital health technology

Based in the United StatesFull-TimeStaff

Salary$151,000–$178,500 annually; $150,000–$215,000

Apply NowOpens the employer's application page

Job Details

Have at least 8 years of experience in security engineering, including hands-on responsibility for production cloud environments.
Bring deep knowledge of AWS security architecture, including IAM, network security, KMS, logging, threat detection, serverless security, and cloud hardening.
Have experience securing PostgreSQL and other stores containing regulated or sensitive information.
Understand application security, API protection, secure architecture, and common software vulnerabilities; be able to review code and work with software engineers.
Have direct experience leading or owning SOC 2 Type I and/or Type II audits and HIPAA compliance initiatives.
Have practical experience with Infrastructure-as-Code security controls using Pulumi, AWS CloudFormation, or AWS CDK, and CI/CD security practices.
Have experience securing AI-powered applications and LLM systems, including OWASP LLM Top 10 vulnerabilities, data privacy risks, and model access controls.
Have experience identifying, investigating, containing, and resolving security incidents.
Be able to work independently, establish priorities, and make risk-based decisions.
Familiarity with Vanta, Drata, or Secureframe is advantageous.
Experience with WebRTC, HITRUST, ISO 27001, or NIST frameworks is beneficial.
Relevant certifications such as AWS Certified Security – Specialty, CISSP, CCSP, or OSCP are advantageous.

Architect and improve security across AWS infrastructure, including IAM, networking, encryption, logging, and threat detection.
Establish infrastructure security guardrails and policy-as-code, and harden Amazon EKS clusters.
Secure application architecture and APIs through authentication, authorization, threat modeling, security testing, and CI/CD controls.
Protect video and communication systems, including WebRTC, media transport, session access, recording storage, and encryption.
Develop AI usage policies and safeguards for AI/ML applications, sensitive data, and model workflows.
Lead SOC 2 compliance efforts and own HIPAA Security Rule compliance, audits, policies, and risk assessments.
Maintain security policies, risk registers, vendor risk management, and compliance automation.
Partner with IT providers to secure employee devices and manage identity and access controls.
Establish monitoring and alerting, lead incident response, and test incident procedures and tabletop exercises.
Define the security roadmap, communicate risk and trade-offs, and mentor engineers.

View Full Description & ApplyYou'll be redirected to the employer's site