Senior Platform Security Engineer, SOC 2 / HIPAA

🕒 Outubro 22

🇺🇸 Estados Unidos – Remoto (EUA)

💵 $14.583 - $17.500 / mês

⏰ Tempo Integral

🟠 Sênior

🏗️ Engenheiro de Plataforma

👻 Score fantasma 0%

O que significa: a chance de ninguém estar realmente contratando para esta vaga.Como ler: 60% ou mais significa que achamos que é uma vaga fantasma. Pontuações mais baixas preocupam menos.Como pontuamos: tempo em aberto, republicações, vagas abertas vs tamanho do time, rapidez para fechar vagas, e se o salário está divulgado.Observação: é uma estimativa de dados públicos, não um julgamento da empresa. Vagas reais podem ter pontuação alta, então use como uma dica, não como um fato.

Candidatar-se

Encontrar Vagas Remotas Similares

Atomic - Remote Jobs

SiteLinkedInTodas as Vagas

1 - 10 funcionários

📣 Marketing

📦 Logística

✈️ Turismo

Marketing • Logistics • Travel

Atomic - Remote Jobs é uma plataforma de recrutamento que conecta profissionais de tecnologia da América Latina e Canadá com oportunidades de carreira remotas em startups e empresas consolidadas ao redor do mundo. A plataforma opera um quadro de empregos remoto e oferece suporte personalizado ao candidato e correspondência de vagas, focando em funções nas áreas de engenharia, design, marketing e operações, enquanto enfatiza a transparência, adequação de carreira a longo prazo e arranjos de trabalho remotos.

Descrição

• Design identity, authentication, authorization, secrets storage, and production-access controls • Write the architecture and code for security, privacy, and compliance controls • Define isolation between environments, tenants, workloads, and sensitive data • Build audit logs and change history suitable for external auditor testing • Maintain SOC 2 Type II and HIPAA technical controls • Automate access reviews and evidence collection • Close technical audit findings and work with auditors on testing • Build secure CI/CD release paths and infrastructure-as-code controls with production approvals • Publish shared modules and reference implementations • Run threat models for critical workflows and convert findings into engineering requirements • Review security-sensitive code, infrastructure, and architecture changes • Own engineering-side logging, detection, runbooks, and escalation paths • Lead or support incident investigation and containment • Participate in tabletop exercises with the Trust Product Manager and leadership • Translate NIST requirements into controls and priorities • Provide leadership with a technical roadmap for state and federal environments toward FedRAMP-aligned practices • Serve as senior engineer and technical lead for platform security, privacy, and compliance controls • Collaborate with the Trust Product Manager, Product leadership, Engineering leadership, auditors, and other engineers

🎯 Requisitos

• 7+ years of software engineering experience • A few years as the senior or lead engineer on production systems • Committed application and infrastructure code in the last year or two • Hands-on SOC 2 Type II and HIPAA experience, including implementing and operating controls through an audit • Experience building or operating a system holding protected health information • Cloud-native production experience, ideally on AWS • Experience with infrastructure as code and CI/CD pipelines with approval steps • Experience setting up production environments independently • Experience designing authentication, role- or attribute-based authorization, service identities, secrets management, production access controls, and audit logging • Threat modeling carried through to shipped controls • Experience closing audit, penetration-test, or incident findings • Ability to evaluate what to enforce in software versus process and explain the trade-off to product leads, auditors, and engineers • Ability to work autonomously while architecture and operating models are still taking shape • Must be based in the U.S. • Bonus: NIST 800-53 or other 800-series controls mapped to system changes • Bonus: FedRAMP or ISO 27001 experience • Bonus: Automated evidence collection or continuous control monitoring accepted by an auditor • Bonus: Incident-response runbooks or tabletop exercise experience • Bonus: Node, TypeScript, and AWS in the same production environment • Bonus: Software experience for government, healthcare, or fintech customers

🏖️ Benefícios

• Fully remote role within the U.S. • Full-time employment through an Employer of Record (EOR) • Real technical ownership of design decisions and control-building priorities • Direct collaboration with Product & Engineering leadership • Mission-driven impact protecting the data of families who rely on public benefits

📊 Verifique sua pontuação de currículo para esta vaga

Melhore suas chances de conseguir uma entrevista verificando sua pontuação de currículo antes de se candidatar.

Enviar Currículo