Senior Engineer, Tech Lead – Trust, Security, Privacy & Compliance

🕒 vor 9 Tagen

🇺🇸 Vereinigte Staaten – Remote

💵 $14.583 - $17.500 / Monat

⏰ Vollzeit

🟠 Senior

🧑‍💻 Full-Stack-Entwickler

👻 Geisterscore 0%

Was es bedeutet: wie wahrscheinlich diese Stelle offen bleibt, ohne dass aktiv eingestellt wird.So liest du es: 60 % oder höher heißt, wir halten das für einen Geisterjob. Niedrigere Werte sind weniger bedenklich.Wie wir werten: Dauer offen, Neuveröffentlichungen, offene Stellen vs Teamgröße, wie schnell Stellen geschlossen werden, und ob ein Gehalt angegeben ist.Hinweis: eine Schätzung aus öffentlichen Daten, kein Urteil über das Unternehmen. Echte Stellen können hoch punkten, nutze es also als Hinweis, nicht als Fakt.

Jetzt Bewerben

Ähnliche Remote-Jobs finden

E-Mail-Benachrichtigung für neue Jobs einrichten

📊 Überprüfen Sie Ihre Lebenslauf-Bewertung für diese Stelle

Verbessern Sie Ihre Chancen auf ein Vorstellungsgespräch, indem Sie Ihre Lebenslauf-Bewertung vor der Bewerbung überprüfen.

Lebenslauf hochladen

Atomic - Remote Jobs

WebsiteLinkedInAlle Stellen

1 - 10 Mitarbeiter

📣 Marketing

📦 Logistik

✈️ Reisen

Marketing • Logistics • Travel

Atomic - Remote Jobs ist eine Rekrutierungsplattform, die Technologieprofis in Lateinamerika und Kanada mit Remote-Karrieremöglichkeiten bei Startups und etablierten Unternehmen weltweit verbindet. Sie betreibt ein Remote-Job-Board und bietet personalisierte Kandidatenunterstützung und Matching an, wobei der Fokus auf Positionen in den Bereichen Engineering, Design, Marketing und Operations liegt. Dabei wird Transparenz, langfristige Karrieretauglichkeit und eine Remote-First-Arbeitsweise betont.

Beschreibung

• Design and implement identity, authentication, authorization, service identity, secrets management, production access, and audit controls • Define and implement isolation for environments, tenants, workloads, and sensitive data • Build audit logs and change history suitable for external auditor testing • Maintain technical SOC 2 Type II and HIPAA controls • Automate access reviews and audit evidence collection • Close technical audit findings and collaborate with auditors during testing • Build secure CI/CD release paths and infrastructure-as-code controls with production approvals • Publish shared modules and reference implementations so teams receive controls by default • Run threat models for critical workflows and convert findings into engineering requirements • Review security-sensitive code, infrastructure, and architecture changes • Own engineering-side logging, detection, runbooks, and escalation paths • Lead or support incident investigations and containment • Participate in tabletop exercises with the Trust Product Manager and leadership • Translate NIST requirements into controls and priorities • Provide leadership with a technical roadmap for state and federal environments, including FedRAMP-aligned practices where applicable • Serve as senior engineer and technical lead for security, privacy, and compliance controls • Partner technically with the Trust Product Manager, who owns requirements, governance, and roadmap

🎯 Anforderungen

• 7+ years of software engineering experience, including a few years as the senior or lead engineer on production systems • Committed application and infrastructure code personally within the last year or two • Hands-on SOC 2 Type II and HIPAA experience, including implementing and running controls through an audit • Experience building or operating a system holding protected health information • Cloud-native production experience, ideally on AWS • Experience with infrastructure as code and CI/CD pipelines with approval steps • Experience setting up production environments independently • Experience designing identity and access systems, including authentication, role- or attribute-based authorization, service identities, secrets management, production access controls, and audit logging • Threat modeling carried through to shipped controls • Experience closing audit, penetration-test, or incident findings • Ability to explain enforcement trade-offs to product leads, auditors, and engineers • Ability to work autonomously while architecture and the operating model are still taking shape • Must be based in the U.S. • Bonus: NIST 800-53 or other 800-series controls mapped to real system changes • Bonus: FedRAMP or ISO 27001 experience • Bonus: Automated evidence collection or continuous control monitoring accepted by an auditor • Bonus: Incident-response runbooks or tabletop exercise experience • Bonus: Node, TypeScript, and AWS in the same production environment • Bonus: Software built for government, healthcare, or fintech customers

🏖️ Vorteile

• Fully remote role within the U.S. • Full-time employment through an Employer of Record (EOR) • Real technical ownership of design decisions and control-building priorities • Direct collaboration with Product & Engineering leadership • Mission-driven impact protecting the data of families who rely on public benefits