Senior Information Security Engineer

Vaga não está no LinkedIn

🕒 Outubro 6

🇺🇸 Estados Unidos – Remoto (EUA)

💵 $140.000 - $160.000 / ano

⏰ Tempo Integral

🟠 Sênior

👮‍♂️ Cibersegurança / Engenheiro de Segurança

🦅 Patrocina Visto H1B

Esta empresa já patrocinou vistos H1B no passado.

👻 Score fantasma 0%

O que significa: a chance de ninguém estar realmente contratando para esta vaga.Como ler: 60% ou mais significa que achamos que é uma vaga fantasma. Pontuações mais baixas preocupam menos.Como pontuamos: tempo em aberto, republicações, vagas abertas vs tamanho do time, rapidez para fechar vagas, e se o salário está divulgado.Observação: é uma estimativa de dados públicos, não um julgamento da empresa. Vagas reais podem ter pontuação alta, então use como uma dica, não como um fato.

Candidatar-se

Encontrar Vagas Remotas Similares

Reveleer

SiteLinkedInTodas as Vagas

51 - 200 funcionários

🏥 Saúde

⚕️ Seguro de Saúde

☁️ SaaS

Healthcare • Healthcare Insurance • SaaS

A Reveleer é uma empresa de tecnologia em saúde que se especializa em fornecer uma plataforma completa para cuidados baseados em valor. Sua plataforma utiliza inteligência artificial para automatizar tarefas, melhorar a eficiência e aprimorar o atendimento ao paciente, consolidando fluxos de trabalho de ajuste de risco e melhoria de qualidade. A Reveleer ajuda as organizações de saúde a otimizar suas operações por meio de aquisição inteligente de dados, aumentando a produtividade e garantindo reembolsos precisos. Com foco em inteligência em saúde, a Reveleer integra-se a HIEs e sistemas EHR para melhorar a prestação de cuidados e capturar diagnósticos relevantes. Eles têm uma presença significativa na indústria da saúde, trabalhando com diversos planos de saúde para maximizar seu desempenho e os resultados dos pacientes.

Descrição

• Safeguard Reveleer’s cloud-based healthcare SaaS platforms, AI/ML systems, infrastructure, and customer data • Design and maintain secure architectures across AWS, Azure, and GCP • Implement infrastructure-as-code and policy-as-code security controls • Operate CSPM/CNAPP tooling to detect misconfigurations, toxic combinations, and exposed PHI data stores • Secure containerized and serverless workloads across EKS, ECS, and Lambda • Enforce network segmentation, encryption standards, and centralized key and secrets management • Partner with Data Science and AI Engineering to secure model development, training, fine-tuning, inference, and RAG pipelines handling PHI and PII • Threat model AI features and address prompt injection, insecure output handling, training data poisoning, exfiltration, and excessive agency • Implement AI gateways, guardrails, content filtering, validation, rate limiting, and audit logging • Govern third-party and foundation model usage, including vendor reviews, data residency, retention, zero-retention, no-training, and BAA controls • Establish controls against shadow AI and secure the ML supply chain • Contribute to AI governance with Compliance and Legal • Embed security into CI/CD pipelines using SAST, DAST, SCA, secrets scanning, and IaC scanning • Perform threat modeling, secure design reviews, and code reviews for microservices, APIs, and AI-enabled features • Secure API and machine-to-machine authorization patterns • Manage software supply chain risk through SBOM generation, dependency governance, and artifact signing • Drive penetration testing, bug bounty intake, and remediation validation • Protect PHI and PII through classification, tokenization, de-identification, and DLP • Manage and tune EDR/XDR platforms and develop detection engineering and response automation • Implement identity security through Microsoft Entra ID, Conditional Access, PIM, and risk-based authentication • Govern non-human identities, service principals, workload identities, and AI agent credentials • Support Intune and MDM compliance baselines across Windows, macOS, iOS, and Android • Operate SaaS security posture management for third-party integrations and OAuth grant risk • Monitor and triage alerts, investigate incidents, and coordinate response with SOC and MDR partners • Build and maintain SIEM detection content, detection-as-code, log pipeline coverage, and MITRE ATT&CK mapping • Develop incident response runbooks, playbooks, and forensic procedures, including AI-specific scenarios • Automate response and enrichment through SOAR workflows, Python, and PowerShell • Participate in tabletop exercises, purple team activity, and post-incident reviews • Support audits and evidence collection for HIPAA, HITRUST, SOC 2 Type 2, NIST 800-53, and customer security assessments • Maintain asset and AI system inventories, risk registers, and remediation tracking • Conduct vendor and third-party risk reviews, especially for AI subprocessors and data flows • Partner with Compliance to align technical controls, policies, and standards • Contribute to security awareness and training, including responsible AI use guidance

🎯 Requisitos

• Bachelor’s degree in Computer Science, Information Security, or equivalent experience • 5+ years of experience in security engineering or related technical security roles • Strong knowledge of cloud-native security across AWS, Azure, and GCP • Hands-on experience with SIEM, EDR/XDR, IAM, vulnerability management, and security automation • Familiarity with HIPAA, HITRUST, NIST, and SOC 2 requirements • Experience securing containerized and serverless workloads, such as EKS and Lambda • Preferred: CISSP, CISM, CCSP, AWS Security Specialty, or GIAC certifications • Preferred: Terraform, Ansible, or CloudFormation experience for infrastructure-as-code security • Preferred: DevSecOps pipeline and tools experience, such as Jenkins and Bitbucket • Preferred: Strong scripting skills in Python, PowerShell, or Bash • Analytical and detail-oriented with strong problem-solving skills • Ability to balance business needs with risk mitigation • Excellent communication skills for translating complex technical topics to non-technical stakeholders • Collaborative and proactive approach to continuous improvement • Must complete Reveleer’s E-Verify process as a new hire

🏖️ Benefícios

• Competitive salary • Medical, Dental and Vision benefits • 401k match • Generous PTO plan

📊 Verifique sua pontuação de currículo para esta vaga

Melhore suas chances de conseguir uma entrevista verificando sua pontuação de currículo antes de se candidatar.

Enviar Currículo