Staff Cloud Security Engineer

🕒 vor 8 Tagen

🇺🇸 Vereinigte Staaten – Remote

💵 $151.000 - $178.500 / Jahr

⏰ Vollzeit

🔴 Experte

👮‍♂️ IT-Sicherheitsingenieur

👻 Geisterscore 1%

Was es bedeutet: wie wahrscheinlich diese Stelle offen bleibt, ohne dass aktiv eingestellt wird.So liest du es: 60 % oder höher heißt, wir halten das für einen Geisterjob. Niedrigere Werte sind weniger bedenklich.Wie wir werten: Dauer offen, Neuveröffentlichungen, offene Stellen vs Teamgröße, wie schnell Stellen geschlossen werden, und ob ein Gehalt angegeben ist.Hinweis: eine Schätzung aus öffentlichen Daten, kein Urteil über das Unternehmen. Echte Stellen können hoch punkten, nutze es also als Hinweis, nicht als Fakt.

Jetzt Bewerben

Ähnliche Remote-Jobs finden

E-Mail-Benachrichtigung für neue Jobs einrichten

📊 Überprüfen Sie Ihre Lebenslauf-Bewertung für diese Stelle

Verbessern Sie Ihre Chancen auf ein Vorstellungsgespräch, indem Sie Ihre Lebenslauf-Bewertung vor der Bewerbung überprüfen.

Lebenslauf hochladen

AnswersNow

WebsiteLinkedInAlle Stellen

11 - 50 Mitarbeiter

🏥 Gesundheitswesen

💼 Beratung

⚕️ Krankenversicherung

💰 €11.000.000 Series A im 2023-02

Healthcare • Consulting • Healthcare Insurance

AnswersNow ist eine virtuelle Plattform, die sich der Bereitstellung von Autism Behavior Analysis (ABA)-Therapie für Familien widmet und qualitativ hochwertige Unterstützung leicht zugänglich macht. Das Unternehmen bietet personalisierte, evidenzbasierte Pflege, die auf die individuellen Bedürfnisse von Kindern mit Autismus zugeschnitten ist, indem es sie mit zertifizierten Verhaltensanalytikern zu Einzelsitzungen verbindet. AnswersNow engagiert sich dafür, Familien zu stärken und sicherzustellen, dass die Therapie in einer komfortablen, vertrauten Umgebung durchgeführt werden kann, um das Betreuungserlebnis ohne lange Wartezeiten zu optimieren.

Beschreibung

• Architect, secure, and continuously harden the AWS environment, including IAM, VPC, KMS, CloudTrail, GuardDuty, Security Hub, Config, and WAF • Secure serverless and data layers including Lambda, S3, and PostgreSQL/RDS/Aurora through encryption, least-privilege access, network isolation, backup integrity, and audit logging • Implement Infrastructure-as-Code security guardrails and policy-as-code • Own secrets management, key management, and certificate lifecycle • Manage and harden Amazon EKS infrastructure, including cluster security, network policies, and container runtime security • Secure APIs and application stack, including authentication/authorization, session management, rate limiting, input validation, and OWASP Top 10/API Top 10 risks • Embed security into the SDLC through threat modeling, secure design reviews, SAST/DAST, dependency and container scanning, and CI/CD pipeline security • Secure the proprietary real-time video platform, including WebRTC/media transport, session access controls, recording storage, and encryption • Run vulnerability management and penetration testing, including vendor selection, scoping, and remediation tracking • Establish company-wide AI usage policies and governance frameworks • Architect and secure in-product AI/ML capabilities against OWASP LLM Top 10 vulnerabilities • Implement privacy guardrails for PHI/PII in model training, fine-tuning, and prompt contexts • Define model security controls and secure artifacts, endpoints, dependencies, and access controls • Build monitoring, telemetry, and audit logging across AI/ML workflows • Own SOC 2 Type I and Type II readiness, control design, evidence collection, auditor management, and ongoing compliance • Own HIPAA Security Rule compliance, including risk assessments, policies, BAAs, breach notification procedures, and audit readiness • Tune Vanta integrations, automate evidence collection, and drive remediation • Maintain security policies, risk register, and vendor risk management program • Support customer and payer security questionnaires and due diligence • Manage endpoint security with outsourced IT, including MDM, disk encryption, EDR, patching, hardening baselines, and device compliance • Own identity and access management, including SSO, MFA, RBAC, joiner/mover/leaver processes, and periodic access reviews • Run security awareness and HIPAA training programs with People Ops • Build logging, monitoring, alerting, and SIEM capabilities • Develop and test the incident response plan, run tabletop exercises, and lead incident response • Partner with engineering on disaster recovery, backup, and business continuity planning • Define the security roadmap and communicate risk to the CTO and executive team • Mentor engineers and build a security-conscious culture, including a security champions model • Build the business case for tools, vendors, and future security headcount

🎯 Anforderungen

• 8+ years in security engineering, with significant hands-on experience securing production cloud environments, ideally AWS-heavy • Deep AWS security expertise (IAM, networking, encryption/KMS, logging and detection services, serverless security) • Experience securing PostgreSQL and other data stores containing regulated or sensitive data • Strong application and API security background, with ability to review code and architecture and work effectively with developers • Direct experience owning or leading a SOC 2 audit (Type I and/or Type II) and HIPAA compliance, ideally in healthcare or health-tech handling PHI • Experience with Infrastructure-as-Code (Pulumi, CloudFormation, or CDK) and CI/CD security • Experience with AI security, LLM application security, and OWASP LLM Top 10 vulnerabilities • Strong incident response experience • Excellent communication with engineers, executives, auditors, and customers • Experience with compliance automation platforms such as Vanta, Drata, or Secureframe (nice to have) • Experience securing real-time communication or video platforms (WebRTC) (nice to have) • Familiarity with HITRUST, ISO 27001, or NIST frameworks (nice to have) • Experience at a startup or scale-up where you built a security program from scratch (nice to have) • Relevant certifications such as AWS Security Specialty, CISSP, CCSP, OSCP, or similar (nice to have) • Experience with pediatric or behavioral health data and privacy considerations for minors' information (nice to have) • Legally authorized to work in the United States

🏖️ Vorteile

• Equity options in a high-growth, venture-backed company • Comprehensive medical, dental, and vision • Generous PTO • Remote-first flexibility