Senior Platform Security Engineer, SOC 2 / HIPAA

🕒 vor 19 Tagen

🇺🇸 Vereinigte Staaten – Remote

💵 $14.583 - $17.500 / Monat

⏰ Vollzeit

🟠 Senior

🏗️ Plattformingenieur

👻 Geisterscore 0%

Was es bedeutet: die Wahrscheinlichkeit, dass für diese Stelle niemand wirklich einstellt.So liest du es: 60 % oder höher heißt, wir halten das für einen Geisterjob. Niedrigere Werte sind weniger bedenklich.Warum dieser Wert:

• Seit 19 Tagen offen.
• Stellen bei diesem Unternehmen werden meist in 44 Tagen besetzt.

Jetzt Bewerben

Ähnliche Remote-Jobs finden

Atomic - Remote Jobs

WebsiteLinkedInAlle Stellen

1 - 10 Mitarbeiter

📣 Marketing

📦 Logistik

✈️ Reisen

Marketing • Logistics • Travel

Atomic - Remote Jobs ist eine Rekrutierungsplattform, die Technologieprofis in Lateinamerika und Kanada mit Remote-Karrieremöglichkeiten bei Startups und etablierten Unternehmen weltweit verbindet. Sie betreibt ein Remote-Job-Board und bietet personalisierte Kandidatenunterstützung und Matching an, wobei der Fokus auf Positionen in den Bereichen Engineering, Design, Marketing und Operations liegt. Dabei wird Transparenz, langfristige Karrieretauglichkeit und eine Remote-First-Arbeitsweise betont.

Beschreibung

• Design identity, authentication, authorization, secrets storage, and production-access controls • Write the architecture and code for security, privacy, and compliance controls • Define isolation between environments, tenants, workloads, and sensitive data • Build audit logs and change history suitable for external auditor testing • Maintain SOC 2 Type II and HIPAA technical controls • Automate access reviews and evidence collection • Close technical audit findings and work with auditors on testing • Build secure CI/CD release paths and infrastructure-as-code controls with production approvals • Publish shared modules and reference implementations • Run threat models for critical workflows and convert findings into engineering requirements • Review security-sensitive code, infrastructure, and architecture changes • Own engineering-side logging, detection, runbooks, and escalation paths • Lead or support incident investigation and containment • Participate in tabletop exercises with the Trust Product Manager and leadership • Translate NIST requirements into controls and priorities • Provide leadership with a technical roadmap for state and federal environments toward FedRAMP-aligned practices • Serve as senior engineer and technical lead for platform security, privacy, and compliance controls • Collaborate with the Trust Product Manager, Product leadership, Engineering leadership, auditors, and other engineers

🎯 Anforderungen

• 7+ years of software engineering experience • A few years as the senior or lead engineer on production systems • Committed application and infrastructure code in the last year or two • Hands-on SOC 2 Type II and HIPAA experience, including implementing and operating controls through an audit • Experience building or operating a system holding protected health information • Cloud-native production experience, ideally on AWS • Experience with infrastructure as code and CI/CD pipelines with approval steps • Experience setting up production environments independently • Experience designing authentication, role- or attribute-based authorization, service identities, secrets management, production access controls, and audit logging • Threat modeling carried through to shipped controls • Experience closing audit, penetration-test, or incident findings • Ability to evaluate what to enforce in software versus process and explain the trade-off to product leads, auditors, and engineers • Ability to work autonomously while architecture and operating models are still taking shape • Must be based in the U.S. • Bonus: NIST 800-53 or other 800-series controls mapped to system changes • Bonus: FedRAMP or ISO 27001 experience • Bonus: Automated evidence collection or continuous control monitoring accepted by an auditor • Bonus: Incident-response runbooks or tabletop exercise experience • Bonus: Node, TypeScript, and AWS in the same production environment • Bonus: Software experience for government, healthcare, or fintech customers

🏖️ Vorteile

• Fully remote role within the U.S. • Full-time employment through an Employer of Record (EOR) • Real technical ownership of design decisions and control-building priorities • Direct collaboration with Product & Engineering leadership • Mission-driven impact protecting the data of families who rely on public benefits

📊 Überprüfen Sie Ihre Lebenslauf-Bewertung für diese Stelle

Verbessern Sie Ihre Chancen auf ein Vorstellungsgespräch, indem Sie Ihre Lebenslauf-Bewertung vor der Bewerbung überprüfen.

Lebenslauf hochladen