Senior Cloud Security Engineer

🕒 September 3

🇺🇸 United States – Remote

💵 $150k - $200k / year

⏰ Full Time

🟠 Senior

👮‍♂️ Cybersecurity / Security Engineer

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

👻 Ghost score 10%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

ComPsych

WebsiteLinkedInAll Job Openings

1001 - 5000 employees

Founded 1984

🏥 Healthcare

💼 Consulting

📦 Logistics

Healthcare • Consulting • Logistics

ComPsych is a leading provider of employee assistance programs (EAP), offering mental health and wellness services to employees and their families. The company focuses on improving workplace productivity by providing support services that help employees manage personal and work-related challenges. ComPsych's solutions include counseling, crisis intervention, and various wellness programs designed to enhance overall employee satisfaction and performance.

📋 Description

• Own cloud security posture management across configurations, workloads, and entitlements using CSPM, CWPP, and CIEM • Design and implement identity and access management, least privilege, federation, single sign-on, secrets management, privileged access, and workload/non-human identity controls • Design network segmentation, zero-trust access, firewalls, web application firewalls, and traffic inspection across cloud and hybrid networks • Implement container security, encryption, key management, and policy-as-code guardrails across AWS and Azure • Shift application security left in CI/CD through static, dynamic, dependency, and software supply-chain scanning • Perform threat modeling, secrets management, and secure-by-design reviews • Lead data classification, encryption, tokenization, key management, data loss prevention, and privacy-by-design initiatives for PHI and ePHI • Design guardrails, data protection, abuse controls, and misuse controls for AI, machine learning, and generative AI systems • Address AI risks including prompt injection, model poisoning, data poisoning, and sensitive data leakage • Tune SIEM and cloud-native detections, drive event correlation, and lead incident response • Run vulnerability scanning, coordinate penetration testing, and drive findings through remediation • Maintain security baselines, configuration compliance, controls, logging, and audit evidence • Coach engineers across teams and make secure practices the default • Perform other duties as assigned

🎯 Requirements

• Bachelor’s degree in Computer Science or a related field • Security certifications such as CISSP or a cloud security specialty are a plus • 6 to 9 years of security engineering experience, stated as a guideline rather than a hard requirement • Hands-on cloud experience • Experience using agentic AI tools as a primary surface for security engineering, analysis, detection, and automation • Senior-level breadth across network security, application security, cloud security, information security, and AI security, with depth in several areas • Experience building and operating controls as code, including policy as code, infrastructure as code, automation, and detections, in production • Experience carrying on-call and incident load • Cloud security expertise in AWS and Azure, including IAM, least privilege, federation, SSO, secrets management, privileged access, workload and non-human identities, network security, container security, image scanning, runtime protection, key management, encryption, and CSPM/CWPP/CIEM • Data protection and privacy engineering experience, including data classification, encryption, tokenization, key management, DLP, privacy by design, regulated health data, and data residency • Application and product security expertise, including secure SDLC, threat modeling, static analysis, dynamic analysis, software composition analysis, secrets security, software supply chain security, and API security • Detection, response, and vulnerability management expertise, including SIEM, cloud-native detection, log and event correlation, vulnerability scanning and management, penetration testing coordination, and remediation to closure • AI and generative AI security awareness, including prompt injection, data poisoning, model poisoning, and data leakage • Familiarity with OWASP Top 10 for LLM Applications and MITRE ATLAS is a plus • Experience with HIPAA, HITRUST, SOC 2, NIST, ISO 27001, ISO 42001, and GDPR frameworks • Ability to self-start, multitask, and work autonomously • Excellent organizational and project management skills • Effective interpersonal and communication skills

🏖️ Benefits

• Paid Time Off (PTO) • Medical insurance • Dental insurance • Vision insurance • 401(k) with match • Robust Employee Assistance Program (EAP) • Wellness program • Full benefits package