Senior Security & Compliance Engineer

Vaga não está no LinkedIn

🕒 Outubro 30

🇺🇸 Estados Unidos – Remoto (EUA)

💵 $150.000 - $180.000 / ano

⏰ Tempo Integral

🟠 Sênior

🚔 Conformidade

👻 Score fantasma 3%

O que significa: a chance de ninguém estar realmente contratando para esta vaga.Como ler: 60% ou mais significa que achamos que é uma vaga fantasma. Pontuações mais baixas preocupam menos.Por que essa pontuação:

• Aberta há 11 dias.

Candidatar-se

Encontrar Vagas Remotas Similares

Residex

SiteLinkedInTodas as Vagas

11 - 50 funcionários

💸 Finanças

🤝 B2B

Finance • B2B

A Residex está listada no LinkedIn nas categorias de Venture Capital e Private Equity. A empresa parece atuar como uma firma de venture capital e/ou private equity, investindo em empresas do portfólio e gerenciando essas participações. Não foram fornecidas informações públicas adicionais sobre seu foco setorial, preferências quanto ao estágio dos investimentos, atuação geográfica ou investimentos específicos.

Descrição

• Define, review, and approve security standards and strategy across cloud infrastructure, applications, and integrated modules • Partner with Architecture and Engineering leadership on security-focused designs • Lead security event monitoring using SIEM and EDR tooling • Oversee alert triage, complex forensic investigations, and remediation of high-severity incidents • Direct vulnerability assessment and penetration testing programs • Own the certification program, including SOC 2 Type II, HIPAA, and applicable state regulatory requirements • Manage control design, operation, evidence collection, and auditor relationships • Respond to customer security questionnaires and vendor risk assessments • Own third-party and vendor risk management • Define least-privilege IAM standards, including SSO, MFA, and role-based access controls • Mature corporate security across Microsoft Entra ID, M365, endpoint management, SaaS governance, email security, and data loss prevention • Mentor engineering teams on secure coding, threat modeling, and security reviews • Serve as the security voice in product design and infrastructure decisions • Lead incident response planning, execution, root-cause analysis, post-incident reporting, and playbook improvement • Evaluate and deploy security tooling and make build-vs-buy recommendations • Design and lead security awareness training and documentation programs • Mentor junior security engineers

🎯 Requisitos

• 8+ years of experience in a cybersecurity engineering, security operations, or related technical security role • Experience leading investigations or mentoring other engineers, ideally at a B2B SaaS company • Deep, hands-on expertise with cloud security in AWS (preferred), Azure, or GCP, including IAM, network security groups, and logging/monitoring services • Track record of designing security architecture at scale • Practical experience administering Microsoft Entra ID and Auth0 or equivalent, including SSO, MFA, conditional access, and privileged access management • Advanced experience with SIEM/EDR platforms such as Splunk, CrowdStrike, or Elastic and vulnerability management tools, including tool selection and program ownership • Direct ownership of at least one full SOC 2 Type II or HIPAA audit cycle as the primary technical point of contact for auditors • Experience with control design, evidence collection, and remediation of audit findings • Working knowledge of ISO 27001 is a plus • Hands-on experience conducting HIPAA Security Rule risk analyses and managing Business Associate Agreements • Demonstrated ownership of secure software development practices, including threat modeling, code review, and CI/CD pipeline security • Experience setting security standards adopted organization wide • Strong scripting or automation experience with Python, Bash, or similar • Excellent communication and executive presence • Advanced security certifications strongly preferred: CISSP or CISM; HCISPP and CCSP valued; GCIH, GCFA, GCFE, CEH, or CySA+ are a plus • Experience in healthcare, senior living, or another highly regulated industry strongly preferred • Prior experience mentoring or informally leading other security engineers

📊 Verifique sua pontuação de currículo para esta vaga

Melhore suas chances de conseguir uma entrevista verificando sua pontuação de currículo antes de se candidatar.

Enviar Currículo