Senior IT/Security Engineer (AI-native)
New
I
Incredible HealthHealthcare software
This role is 100% remote and can be located in the following states: Alabama, Arizona, California, Colorado, Connecticut, District of Columbia, Florida, Georgia, Idaho, Illinois, Indiana, Iowa, Maryland, Massachusetts, Michigan, Minnesota, Mississippi, Missouri, Nebraska, Nevada, New Jersey, New York, North Carolina, Ohio, Oregon, Pennsylvania, South Carolina, Tennessee, Texas, Utah, Virginia, Washington, West VirginiaFull-TimeSenior
Salary not disclosed
Apply NowOpens the employer's application page
Job Details
- Experience
- You've already been doing this kind of thing for at least five years.
- Required Skills
- AWS
Requirements
- Have at least five years of experience doing this kind of work.
- Have personally owned a SOC 2 Type 2 audit cycle, including evidence management and working with auditors.
- Have strong cloud security experience; AWS experience is an extra plus.
- Have experience deploying and administering IAM, EDR/XDR, SIEM, CSPM, MDM, and GRC platforms such as Vanta.
- Have answered security questionnaires from large enterprise or healthcare customers.
- Have informed opinions and experience related to AI security, including securing internal AI tools and evaluating AI vendors.
- Be able to translate technical AI work into answers enterprise customers can trust.
- Have experience scaling security in a fast-moving, high-tech environment.
Responsibilities
- Own the compliance program and drive annual SOC 2 Type 2 audits, from evidence collection through auditor walkthroughs.
- Run Vanta as the governance home base throughout the year.
- Complete security questionnaires, addendums, and AI risk assessments for hospital clients.
- Run BCDR tests and coordinate annual penetration tests, driving remediation of findings within SLA.
- Manage security across AWS, Heroku, Cloudflare, Google Workspace, GitHub, and communication tools.
- Administer the remote laptop fleet, including imaging, shipping, MDM enrollment, inventory, and end-of-life processes.
- Run access reviews and enforce least privilege, SSO, 2FA, and password policies.
- Manage employee onboarding and offboarding access with HR and Finance through Rippling and Google.
- Evaluate and secure AI tools, and partner with engineering on AI risk, bias testing, and model governance questions.
- Lead security incident response, advise leadership and engineers, and educate the team on security.
View Full Description & ApplyYou'll be redirected to the employer's site
