Senior Security Engineer

🕒 Setembro 12

🇺🇸 Estados Unidos – Remoto (EUA)

💵 $155.000 - $170.000 / ano

⏰ Tempo Integral

🟠 Sênior

👮‍♂️ Cibersegurança / Engenheiro de Segurança

👻 Score fantasma 5%

O que significa: a chance de ninguém estar realmente contratando para esta vaga.Como ler: 60% ou mais significa que achamos que é uma vaga fantasma. Pontuações mais baixas preocupam menos.Como pontuamos: tempo em aberto, republicações, vagas abertas vs tamanho do time, rapidez para fechar vagas, e se o salário está divulgado.Observação: é uma estimativa de dados públicos, não um julgamento da empresa. Vagas reais podem ter pontuação alta, então use como uma dica, não como um fato.

Candidatar-se

Encontrar Vagas Remotas Similares

AgelessRx

SiteLinkedInTodas as Vagas

11 - 50 funcionários

🏥 Saúde

🍽️ Alimentos e Bebidas

⚕️ Seguro de Saúde

Healthcare • Food & Beverage • Healthcare Insurance

AgelessRx é uma empresa especializada em fornecer soluções para o sono e tratamentos curados por especialistas, visando promover uma vida mais saudável e longa. Eles oferecem uma variedade de tratamentos e soluções de monitoramento de saúde projetados para longevidade geral, energia e fadiga, controle de peso, saúde cardíaca, função cognitiva e muito mais. Com base em pesquisas de ponta e uma equipe de profissionais médicos licenciados nos EUA, eles visam ajudar indivíduos a alcançar seus objetivos de saúde por meio de terapias personalizadas baseadas na ciência. Os pacientes podem completar avaliações simples online, receber entrega rápida e gratuita, além de suporte contínuo online ou por telefone para seus tratamentos prescritos. A AgelessRx também enfatiza a pesquisa contínua e o envolvimento comunitário para tornar a ciência da longevidade mais acessível.

Descrição

• Own and evolve AgelessRx's technical security roadmap • Establish and operate repeatable security programs, controls, reporting, and documentation • Conduct security and architecture reviews for systems, vendors, integrations, and technology changes • Maintain visibility into risks, vulnerabilities, remediation priorities, owners, and timelines • Conduct and support HIPAA Security Rule risk assessments • Maintain audit-ready evidence and documentation • Plan and facilitate security and incident-response exercises • Report security posture, priorities, open risks, and remediation progress to leadership • Define identity, authentication, authorization, privileged-access, cloud, endpoint, and email-security standards • Partner with IT on SSO, MFA, privileged access management, endpoint controls, access reviews, and device security • Own vulnerability management across infrastructure, endpoints, applications, and other technology • Embed security into the software development lifecycle • Review architecture, authentication flows, sensitive-data handling, payments, and security-sensitive product areas • Develop threat models for products, features, services, and integrations involving PHI or sensitive information • Deploy and improve SAST, SCA, dependency-scanning, and software-supply-chain controls • Establish application-security finding remediation processes and secure-development guidance • Coordinate penetration testing and vulnerability disclosure and triage • Partner with Engineering to identify risks before production • Support HIPAA audits, investigations, incident response, and compliance activities • Evaluate vendors and partners handling PHI or sensitive information • Serve as technical security owner for AI governance • Maintain visibility into AI systems accessing PHI or sensitive data • Assess AI tools and vendors, including data flows, retention, model training, access controls, subprocessors, and other risks • Extend threat modeling to AI-enabled products, addressing prompt injection, model access, data leakage, output handling, and PHI exposure • Translate evolving healthcare and AI requirements into technical controls • Align AI risk management with a recognized framework and maintain evidence • Review and implement approved MCPs and other AI integrations • Support policies governing employee use of AI tools

🎯 Requisitos

• 5+ years of experience in security engineering, cybersecurity, or a related technical security role • Hands-on depth across at least two major security domains, such as application/product security, cloud and identity security, vulnerability management, security operations, or security governance • Experience securing environments subject to HIPAA or comparable regulatory requirements and translating regulatory obligations into technical controls • Strong working knowledge of at least one major cloud provider and associated IAM and security practices • Strong understanding of identity and access management, including SSO, SAML/OIDC, MFA, privileged access, and least-privilege principles • Experience with application-security tooling and practices, including SAST, SCA, dependency management, threat modeling, and secure software development • Experience establishing or operating recurring security programs such as vulnerability management, access reviews, penetration testing, security assessments, or incident-response exercises • Experience assessing and prioritizing vulnerabilities based on exploitability, business impact, sensitive-data exposure, and practical risk • Working understanding of AI/LLM security risks and governing AI systems in regulated environments • Strong written communication and documentation skills • Ability to operate autonomously and establish structure in an evolving environment • Preferred: direct HIPAA Security Rule risk analyses, OCR audits, healthcare security investigations, or breach response • Preferred: healthcare technology, telehealth, EHR integrations, or HL7/FHIR systems experience • Preferred: building or maturing a security program as an early or first dedicated security hire • Preferred: AI governance or AI risk-management programs, including NIST AI RMF, ISO/IEC 42001, or similar frameworks • Preferred: evaluating AI vendors or systems processing PHI or regulated data • Preferred: emerging healthcare and AI regulatory requirements • Preferred: Docker experience • Relevant security certifications such as OSCP, HCISPP, CISSP, or cloud-security certifications are valued but not required

📊 Verifique sua pontuação de currículo para esta vaga

Melhore suas chances de conseguir uma entrevista verificando sua pontuação de currículo antes de se candidatar.

Enviar Currículo