Lead, Cybersecurity

🕒 Setembro 18

🇺🇸 Estados Unidos – Remoto (EUA)

💵 $150.000 / ano

⏰ Tempo Integral

🟠 Sênior

👮‍♂️ Cibersegurança / Engenheiro de Segurança

🦅 Patrocina Visto H1B

Esta empresa já patrocinou vistos H1B no passado.

👻 Score fantasma 0%

O que significa: a chance de ninguém estar realmente contratando para esta vaga.Como ler: 60% ou mais significa que achamos que é uma vaga fantasma. Pontuações mais baixas preocupam menos.Como pontuamos: tempo em aberto, republicações, vagas abertas vs tamanho do time, rapidez para fechar vagas, e se o salário está divulgado.Observação: é uma estimativa de dados públicos, não um julgamento da empresa. Vagas reais podem ter pontuação alta, então use como uma dica, não como um fato.

Candidatar-se

Encontrar Vagas Remotas Similares

Smartlinx

SiteLinkedInTodas as Vagas

51 - 200 funcionários

Fundada em 2000

🏥 Saúde

💼 Consultoria

📦 Logística

💰 Private equity em 2020-04

Healthcare • Consulting • Logistics

A Smartlinx é uma plataforma de gerenciamento de força de trabalho e RH baseada em SaaS, desenvolvida especificamente para provedores de cuidados a idosos e organizações de recrutamento de saúde. Ela oferece agendamento, controle de ponto, folha de pagamento, relatórios de conformidade PBJ/CMS, análise de força de trabalho, RH unificado (recrutamento, integração, benefícios), gestão de funcionários contingentes e fornecedores e ferramentas móveis para funcionários, visando otimizar o uso de mão de obra, manter a conformidade regulamentar e melhorar o engajamento e retenção de funcionários.

Descrição

• Define and operate Smartlinx's cybersecurity program across multi-tenant SaaS products, cloud infrastructure, corporate technology, data platforms, integrations, and third-party services • Own SaaS product and application security, cloud and infrastructure security, identity and access management, vulnerability management, security monitoring, incident response, third-party risk, and SOC 2 Type II readiness • Lead threat modeling, security architecture reviews, abuse-case analysis, risk assessments, secure coding guidance, automated security testing, penetration testing, and remediation • Establish secure cloud baselines and govern network security, secrets, certificates, encryption, privileged credentials, patching, endpoint protection, vulnerability scanning, and configuration management • Review security of databases, data platforms, data exchanges, backups, and disaster-recovery environments • Lead SOC 2 Type II readiness, control design, evidence collection, auditor coordination, remediation, management responses, and annual attestation • Maintain security policies, standards, procedures, risk register, evidence repository, exception records, remediation plans, and executive compliance reporting • Apply HIPAA and HITECH requirements and support customer contractual security obligations • Establish unified vulnerability-management and third-party security programs • Define security monitoring, detection use cases, incident-response plans, escalation paths, investigations, containment, recovery, forensics, and post-incident reviews • Conduct tabletop exercises and drive corrective actions to closure • Establish identity-first security with least privilege, multifactor authentication, privileged access management, conditional access, and access certification • Govern data classification, access, encryption, masking, retention, deletion, secure disposal, and data-loss prevention • Develop cybersecurity strategy, operating plan, budget, staffing model, roadmap, executive and Board reporting, and security scorecard • Select and manage security tools, deliver security education, and recruit, coach, and develop security personnel

🎯 Requisitos

• Bachelor's degree in Cybersecurity, Computer Science, Engineering, Information Systems, or a related field, or equivalent practical experience • 8+ years of progressive experience across product, application, cloud, infrastructure, or security-operations disciplines • 3+ years in a lead, principal, architect, or security-program ownership role • Experience securing multi-tenant B2B SaaS products in healthcare, payroll, HR technology, or another regulated environment • Experience protecting PHI, PII, financial, or other sensitive data • Hands-on experience leading at least one successful SOC 2 Type II audit cycle • Strong Microsoft Azure security experience across cloud networking, identity, compute, storage, databases, containers, Kubernetes, infrastructure as code, secrets, logging, monitoring, backup, and recovery • Deep knowledge of secure software development, threat modeling, web, mobile, and API security, authentication, authorization, tenant isolation, OWASP risks, and DevSecOps practices • Hands-on experience with SAST, DAST, SCA, SBOM, secrets scanning, SIEM, EDR, DLP, WAF, CSPM, vulnerability scanning, penetration testing, and related security capabilities • Experience managing vulnerabilities, security findings, and incidents through risk assessment, containment or remediation, retesting, exception management, post-incident review, and executive reporting • Knowledge of SOC 2 Trust Services Criteria, NIST Cybersecurity Framework, CIS Controls, ISO 27001, and HITRUST • Ability to make risk-based decisions, balance security with product delivery, influence cross-functional stakeholders, and explain technical risks clearly • Relevant certifications such as CISSP, CCSP, CISM, CISA, CSSLP, OSCP, GIAC, HITRUST CCSFP, or Microsoft Azure Security Engineer are preferred • Experience with Entra ID, Defender, Sentinel, Azure DevOps, Snowflake, or Microsoft Fabric is preferred

🏖️ Benefícios

• 10% bonus eligible • Remote work environment • Medical insurance • Dental insurance • Vision insurance • FSA • HSA • Life insurance • Pet insurance • 401(k) • Professional development and skills growth opportunities • Occasional travel up to 15%

📊 Verifique sua pontuação de currículo para esta vaga

Melhore suas chances de conseguir uma entrevista verificando sua pontuação de currículo antes de se candidatar.

Enviar Currículo