Staff Cloud Security Engineer

🕒 Outubro 8

🇺🇸 Estados Unidos – Remoto (EUA)

💵 $171.000 - $199.500 / ano

⏰ Tempo Integral

🔴 Especialista

👮‍♂️ Cibersegurança / Engenheiro de Segurança

👻 Score fantasma 13%

O que significa: a chance de ninguém estar realmente contratando para esta vaga.Como ler: 60% ou mais significa que achamos que é uma vaga fantasma. Pontuações mais baixas preocupam menos.Como pontuamos: tempo em aberto, republicações, vagas abertas vs tamanho do time, rapidez para fechar vagas, e se o salário está divulgado.Observação: é uma estimativa de dados públicos, não um julgamento da empresa. Vagas reais podem ter pontuação alta, então use como uma dica, não como um fato.

Candidatar-se

Encontrar Vagas Remotas Similares

AnswersNow

SiteLinkedInTodas as Vagas

11 - 50 funcionários

🏥 Saúde

💼 Consultoria

⚕️ Seguro de Saúde

💰 $11.000.000 Series A em 2023-02

Healthcare • Consulting • Healthcare Insurance

AnswersNow é uma plataforma virtual dedicada a fornecer terapia de Análise do Comportamento Aplicada (ABA) para famílias, tornando o suporte de qualidade facilmente acessível. A empresa oferece cuidados personalizados e baseados em evidências, adaptados às necessidades individuais de crianças com autismo, conectando-os com analistas comportamentais certificados para sessões individuais. Comprometida em empoderar as famílias, a AnswersNow garante que a terapia possa ser realizada em um ambiente confortável e familiar, otimizando a experiência de cuidado sem longas filas de espera.

Descrição

• Architect, secure, and continuously harden the AWS environment, including IAM, VPC design, KMS, CloudTrail, GuardDuty, Security Hub, Config, and WAF • Secure serverless and data layers including Lambda, S3, and PostgreSQL/RDS/Aurora through encryption, least-privilege access, network isolation, backup integrity, and audit logging • Implement Infrastructure-as-Code security guardrails and policy-as-code • Own secrets management, key management, and certificate lifecycle • Manage and harden Amazon EKS infrastructure, including cluster security, network policies, and container runtime security • Secure APIs and application systems through authentication/authorization, session management, rate limiting, input validation, and OWASP Top 10/API Top 10 controls • Embed security into the SDLC through threat modeling, secure design reviews, SAST/DAST, dependency and container scanning, and CI/CD pipeline security • Secure the real-time video platform, including WebRTC/media transport, session access controls, recording storage, and encryption • Run vulnerability management and penetration testing, including vendor selection, scoping, and remediation tracking • Establish company-wide AI usage policies and governance frameworks • Architect and secure in-product AI/ML capabilities against OWASP LLM Top 10 vulnerabilities • Implement privacy guardrails for PHI/PII in model training, fine-tuning, and prompt contexts • Define model security controls and secure model artifacts, endpoints, supply-chain dependencies, and access controls • Build monitoring, telemetry, and audit logging across AI/ML workflows • Own SOC 2 Type I and Type II readiness, control design, evidence collection, auditor management, and remediation • Own HIPAA Security Rule compliance, including risk assessments, policies, BAAs, breach notification procedures, and audit readiness • Tune Vanta integrations, automate evidence collection, and drive remediation of failing tests • Maintain the security policy library, risk register, and vendor risk management program • Support customer and payer security questionnaires and due diligence • Manage laptop and workstation security with outsourced IT, including MDM, disk encryption, EDR, patching, hardening baselines, and device compliance • Own identity and access management, including SSO, MFA, RBAC, joiner/mover/leaver processes, and periodic access reviews • Run security awareness and HIPAA training programs with People Ops • Build platform and corporate logging, monitoring, alerting, and SIEM capabilities • Develop and test the incident response plan, run tabletop exercises, and lead incident response • Partner with engineering on disaster recovery, backup, and business continuity planning • Define the security roadmap and communicate risk to the CTO and executive team • Mentor engineers and build a security-conscious culture, including a security champions model • Build the business case for tools, vendors, and future security headcount

🎯 Requisitos

• 8+ years in security engineering, with significant hands-on experience securing production cloud environments, ideally AWS-heavy • Deep AWS security expertise, including IAM, networking, encryption/KMS, logging and detection services, and serverless security • Experience securing PostgreSQL and other data stores containing regulated or sensitive data • Strong application and API security background • Ability to review code and architecture and work effectively with developers • Direct experience owning or leading a SOC 2 audit (Type I and/or Type II) and HIPAA compliance, ideally in a healthcare or health-tech environment handling PHI • Experience with Infrastructure-as-Code (Pulumi, CloudFormation, or CDK) and CI/CD security • Experience with AI security, LLM application security, and guarding against OWASP LLM Top 10 vulnerabilities • Strong incident response experience • Excellent communication with engineers, executives, auditors, and customers • Experience with compliance automation platforms such as Vanta, Drata, or Secureframe is nice to have • Experience securing real-time communication or video platforms (WebRTC) is nice to have • Familiarity with HITRUST, ISO 27001, or NIST frameworks is nice to have • Experience at a startup or scale-up where you built a security program from scratch is nice to have • Relevant certifications such as AWS Security Specialty, CISSP, CCSP, OSCP, or similar are nice to have • Experience with pediatric or behavioral health data and privacy considerations for minors' information is nice to have

🏖️ Benefícios

• Equity options in a high-growth, venture-backed company • Comprehensive medical, dental, and vision • Generous PTO • Remote-first flexibility

📊 Verifique sua pontuação de currículo para esta vaga

Melhore suas chances de conseguir uma entrevista verificando sua pontuação de currículo antes de se candidatar.

Enviar Currículo