Senior Security & Compliance Engineer

Job not on LinkedIn

🔥 6 hours ago

🇺🇸 United States – Remote

💵 $150k - $180k / year

⏰ Full Time

🟠 Senior

🚔 Compliance

👻 Ghost score 3%

What it means: the chance that no one is really hiring for this job.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Residex

WebsiteLinkedInAll Job Openings

11 - 50 employees

💸 Finance

🤝 B2B

Finance • B2B

Residex is listed on LinkedIn under Venture Capital and Private Equity Principals. It appears to operate as a venture capital and/or private equity firm that invests in and manages portfolio companies. No additional public details about its sector focus, stage preferences, geographic focus, or specific investments were provided in the supplied information.

📋 Description

• Define, review, and approve security standards and strategy across cloud infrastructure, applications, and integrated modules • Partner with Architecture and Engineering leadership on security-focused designs • Lead security event monitoring using SIEM and EDR tooling • Oversee alert triage, complex forensic investigations, and remediation of high-severity incidents • Direct vulnerability assessment and penetration testing programs • Own the certification program, including SOC 2 Type II, HIPAA, and applicable state regulatory requirements • Manage control design, operation, evidence collection, and auditor relationships • Respond to customer security questionnaires and vendor risk assessments • Own third-party and vendor risk management • Define least-privilege IAM standards, including SSO, MFA, and role-based access controls • Mature corporate security across Microsoft Entra ID, M365, endpoint management, SaaS governance, email security, and data loss prevention • Mentor engineering teams on secure coding, threat modeling, and security reviews • Serve as the security voice in product design and infrastructure decisions • Lead incident response planning, execution, root-cause analysis, post-incident reporting, and playbook improvement • Evaluate and deploy security tooling and make build-vs-buy recommendations • Design and lead security awareness training and documentation programs • Mentor junior security engineers

🎯 Requirements

• 8+ years of experience in a cybersecurity engineering, security operations, or related technical security role • Experience leading investigations or mentoring other engineers, ideally at a B2B SaaS company • Deep, hands-on expertise with cloud security in AWS (preferred), Azure, or GCP, including IAM, network security groups, and logging/monitoring services • Track record of designing security architecture at scale • Practical experience administering Microsoft Entra ID and Auth0 or equivalent, including SSO, MFA, conditional access, and privileged access management • Advanced experience with SIEM/EDR platforms such as Splunk, CrowdStrike, or Elastic and vulnerability management tools, including tool selection and program ownership • Direct ownership of at least one full SOC 2 Type II or HIPAA audit cycle as the primary technical point of contact for auditors • Experience with control design, evidence collection, and remediation of audit findings • Working knowledge of ISO 27001 is a plus • Hands-on experience conducting HIPAA Security Rule risk analyses and managing Business Associate Agreements • Demonstrated ownership of secure software development practices, including threat modeling, code review, and CI/CD pipeline security • Experience setting security standards adopted organization wide • Strong scripting or automation experience with Python, Bash, or similar • Excellent communication and executive presence • Advanced security certifications strongly preferred: CISSP or CISM; HCISPP and CCSP valued; GCIH, GCFA, GCFE, CEH, or CySA+ are a plus • Experience in healthcare, senior living, or another highly regulated industry strongly preferred • Prior experience mentoring or informally leading other security engineers

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume