Senior Cloud Security Engineer

🕒 Setembro 3

🇺🇸 Estados Unidos – Remoto (EUA)

💵 $150.000 - $200.000 / ano

⏰ Tempo Integral

🟠 Sênior

👮‍♂️ Cibersegurança / Engenheiro de Segurança

🦅 Patrocina Visto H1B

Esta empresa já patrocinou vistos H1B no passado.

👻 Score fantasma 17%

O que significa: a chance de ninguém estar realmente contratando para esta vaga.Como ler: 60% ou mais significa que achamos que é uma vaga fantasma. Pontuações mais baixas preocupam menos.Como pontuamos: tempo em aberto, republicações, vagas abertas vs tamanho do time, rapidez para fechar vagas, e se o salário está divulgado.Observação: é uma estimativa de dados públicos, não um julgamento da empresa. Vagas reais podem ter pontuação alta, então use como uma dica, não como um fato.

Candidatar-se

Encontrar Vagas Remotas Similares

ComPsych

SiteLinkedInTodas as Vagas

1001 - 5000 funcionários

Fundada em 1984

🏥 Saúde

💼 Consultoria

📦 Logística

Healthcare • Consulting • Logistics

ComPsych é um fornecedor líder de programas de assistência ao empregado (EAP), oferecendo serviços de saúde mental e bem-estar aos funcionários e suas famílias. A empresa se concentra em melhorar a produtividade no local de trabalho, fornecendo serviços de apoio que ajudam os funcionários a gerenciar desafios pessoais e relacionados ao trabalho. As soluções da ComPsych incluem aconselhamento, intervenção em crises e diversos programas de bem-estar projetados para aprimorar a satisfação e o desempenho geral dos funcionários.

Descrição

• Own cloud security posture management across configurations, workloads, and entitlements using CSPM, CWPP, and CIEM • Design and implement identity and access management, least privilege, federation, single sign-on, secrets management, privileged access, and workload/non-human identity controls • Design network segmentation, zero-trust access, firewalls, web application firewalls, and traffic inspection across cloud and hybrid networks • Implement container security, encryption, key management, and policy-as-code guardrails across AWS and Azure • Shift application security left in CI/CD through static, dynamic, dependency, and software supply-chain scanning • Perform threat modeling, secrets management, and secure-by-design reviews • Lead data classification, encryption, tokenization, key management, data loss prevention, and privacy-by-design initiatives for PHI and ePHI • Design guardrails, data protection, abuse controls, and misuse controls for AI, machine learning, and generative AI systems • Address AI risks including prompt injection, model poisoning, data poisoning, and sensitive data leakage • Tune SIEM and cloud-native detections, drive event correlation, and lead incident response • Run vulnerability scanning, coordinate penetration testing, and drive findings through remediation • Maintain security baselines, configuration compliance, controls, logging, and audit evidence • Coach engineers across teams and make secure practices the default • Perform other duties as assigned

🎯 Requisitos

• Bachelor’s degree in Computer Science or a related field • Security certifications such as CISSP or a cloud security specialty are a plus • 6 to 9 years of security engineering experience, stated as a guideline rather than a hard requirement • Hands-on cloud experience • Experience using agentic AI tools as a primary surface for security engineering, analysis, detection, and automation • Senior-level breadth across network security, application security, cloud security, information security, and AI security, with depth in several areas • Experience building and operating controls as code, including policy as code, infrastructure as code, automation, and detections, in production • Experience carrying on-call and incident load • Cloud security expertise in AWS and Azure, including IAM, least privilege, federation, SSO, secrets management, privileged access, workload and non-human identities, network security, container security, image scanning, runtime protection, key management, encryption, and CSPM/CWPP/CIEM • Data protection and privacy engineering experience, including data classification, encryption, tokenization, key management, DLP, privacy by design, regulated health data, and data residency • Application and product security expertise, including secure SDLC, threat modeling, static analysis, dynamic analysis, software composition analysis, secrets security, software supply chain security, and API security • Detection, response, and vulnerability management expertise, including SIEM, cloud-native detection, log and event correlation, vulnerability scanning and management, penetration testing coordination, and remediation to closure • AI and generative AI security awareness, including prompt injection, data poisoning, model poisoning, and data leakage • Familiarity with OWASP Top 10 for LLM Applications and MITRE ATLAS is a plus • Experience with HIPAA, HITRUST, SOC 2, NIST, ISO 27001, ISO 42001, and GDPR frameworks • Ability to self-start, multitask, and work autonomously • Excellent organizational and project management skills • Effective interpersonal and communication skills

🏖️ Benefícios

• Paid Time Off (PTO) • Medical insurance • Dental insurance • Vision insurance • 401(k) with match • Robust Employee Assistance Program (EAP) • Wellness program • Full benefits package

📊 Verifique sua pontuação de currículo para esta vaga

Melhore suas chances de conseguir uma entrevista verificando sua pontuação de currículo antes de se candidatar.

Enviar Currículo