Cloud Security Engineer

🕒 vor 28 Tagen

🏈 Ohio – Remote

🏈 Ohio – Remote

💵 $115.000 - $150.000 / Jahr

⏰ Vollzeit

🟡 Mittelstufe

🟠 Senior

👮‍♂️ IT-Sicherheitsingenieur

👻 Geisterscore 4%

Was es bedeutet: wie wahrscheinlich diese Stelle offen bleibt, ohne dass aktiv eingestellt wird.So liest du es: 60 % oder höher heißt, wir halten das für einen Geisterjob. Niedrigere Werte sind weniger bedenklich.Wie wir werten: Dauer offen, Neuveröffentlichungen, offene Stellen vs Teamgröße, wie schnell Stellen geschlossen werden, und ob ein Gehalt angegeben ist.Hinweis: eine Schätzung aus öffentlichen Daten, kein Urteil über das Unternehmen. Echte Stellen können hoch punkten, nutze es also als Hinweis, nicht als Fakt.

Jetzt Bewerben

Ähnliche Remote-Jobs finden

E-Mail-Benachrichtigung für neue Jobs einrichten

📊 Überprüfen Sie Ihre Lebenslauf-Bewertung für diese Stelle

Verbessern Sie Ihre Chancen auf ein Vorstellungsgespräch, indem Sie Ihre Lebenslauf-Bewertung vor der Bewerbung überprüfen.

Lebenslauf hochladen

Gifthealth

WebsiteLinkedInAlle Stellen

501 - 1000 Mitarbeiter

Gegründet 2020

🏥 Gesundheitswesen

📦 Logistik

💼 Beratung

💰 €40.000.000 Private Equity Round - GiftHealth im 2023-04

Healthcare • Logistics • Consulting

Gifthealth ist ein technologiegestütztes Unternehmen für Patientenzugang und Rezeptabwicklung, das Patienten, Verordner, Apotheken und Pharmahersteller über eine einheitliche digitale Plattform verbindet. Es vereinfacht die Registrierung, die elektronische Leistungsüberprüfung, die elektronische Vorabgenehmigung und die Unterstützung bei Zahlungen/Bezahlbarkeit, während es die Apothekenabwicklung und Patientenunterstützungsdienste verwaltet. Die Plattform bietet Herstellern auch umsetzbare Daten und Einblicke in Patientenerfahrungen und Markenleistung, um einen schnelleren und zuverlässigeren Zugang zu Medikamenten zu ermöglichen.

Beschreibung

• Develop and maintain security standards and reference architectures for cloud environments • Participate in architecture reviews for new cloud services, platforms, and major infrastructure changes • Evaluate proposed architectures for security risks and recommend appropriate controls • Establish secure patterns for cloud networking, identity, encryption, logging, storage, compute, and managed services • Evaluate security boundaries between AWS-managed infrastructure and externally managed platforms such as Heroku and Snowflake • Identify insecure cloud configurations and excessive permissions • Assess cloud environments against security standards and benchmarks • Prioritize and coordinate remediation of cloud security findings • Establish least-privilege access models and controls for administrative and privileged cloud access • Develop security controls and configuration baselines for compute, storage, databases, networking, serverless services, VPNs, data warehouses, APIs, and secrets management • Implement cloud security guardrails with engineering teams • Ensure cloud logging and security telemetry support monitoring • Develop or assist with detections for suspicious cloud activity • Partner with Security Operations to investigate cloud security events • Embed security requirements into Infrastructure-as-Code • Develop automated checks, preventative controls, reusable secure modules, and templates • Automate security processes using APIs, scripts, and cloud-native services • Support vulnerability management across cloud infrastructure and workloads • Coordinate vulnerability remediation with infrastructure and engineering teams • Develop cloud security standards and technical requirements • Map cloud controls to security and compliance requirements • Provide technical evidence for audits and assessments • Evaluate AI-enabled cloud services such as Amazon Q for security and data-handling implications • Collaborate regularly with Infrastructure, Platform Engineering, DevOps, Software Engineering, IAM, and Security teams • Report to the Director of Security

🎯 Anforderungen

• 3+ years of experience in cloud engineering, cloud security, infrastructure engineering, DevOps, security engineering, or a related field • Hands-on experience securing environments within at least one major public cloud platform • Strong understanding of cloud IAM, networking, encryption, secrets management, logging and monitoring, compute and storage security, vulnerability management, and cloud-native security services • Ability to secure workloads across a hybrid environment spanning AWS and externally managed platforms such as Heroku and Snowflake • Experience scripting or automating infrastructure and security activities • Understanding of least privilege and cloud-native identity models • Ability to evaluate cloud architectures and communicate security requirements clearly to technical teams • Must be able to work at a computer for extended periods • Must be able to communicate effectively, verbally and in writing • Must be able to handle and access sensitive cloud infrastructure and security data in compliance with organizational requirements • Must be able to respond to critical cloud security incidents outside standard working hours when required • Relevant AWS, cloud security, Kubernetes, or security certifications are a plus, but not required • Preferred: strong AWS security experience, including multi-account cloud environments • Preferred: experience with Kubernetes, containers, or serverless technologies • Preferred: experience with CSPM or CNAPP platforms and familiarity with CIS cloud benchmarks, NIST guidance, or other cloud security frameworks • Preferred: familiarity with Site-to-Site and client VPN architectures • Preferred: experience with column-level masking, row-level security, or PHI field-level governance in Snowflake or BigQuery • Preferred: experience with Terraform or CloudFormation and preventative cloud guardrails • Preferred: experience working within regulated environments

🏖️ Vorteile

• Full-time employment • Standard business hours • Flexibility for cloud security incident response or urgent remediation of high-risk findings • Equal Opportunity Employer committed to an inclusive environment