Senior Cloud Security Engineer

🕒 vor 2 Monaten

🏖️ New Jersey – Remote

🏖️ New Jersey – Remote

⏰ Vollzeit

🟠 Senior

👮‍♂️ IT-Sicherheitsingenieur

👻 Geisterscore 31%

Was es bedeutet: wie wahrscheinlich diese Stelle offen bleibt, ohne dass aktiv eingestellt wird.So liest du es: 60 % oder höher heißt, wir halten das für einen Geisterjob. Niedrigere Werte sind weniger bedenklich.Wie wir werten: Dauer offen, Neuveröffentlichungen, offene Stellen vs Teamgröße, wie schnell Stellen geschlossen werden, und ob ein Gehalt angegeben ist.Hinweis: eine Schätzung aus öffentlichen Daten, kein Urteil über das Unternehmen. Echte Stellen können hoch punkten, nutze es also als Hinweis, nicht als Fakt.

Jetzt Bewerben

Ähnliche Remote-Jobs finden

E-Mail-Benachrichtigung für neue Jobs einrichten

📊 Überprüfen Sie Ihre Lebenslauf-Bewertung für diese Stelle

Verbessern Sie Ihre Chancen auf ein Vorstellungsgespräch, indem Sie Ihre Lebenslauf-Bewertung vor der Bewerbung überprüfen.

Lebenslauf hochladen

Med-Metrix

WebsiteLinkedInAlle Stellen

1001 - 5000 Mitarbeiter

Gegründet 2010

🏥 Gesundheitswesen

☁️ SaaS

💰 Private equity im 2025-09

Healthcare • SaaS

Med-Metrix ist ein Unternehmen, für das nur eine minimale Webpräsenz bereitgestellt wurde (die Seite zeigte nur "Ladevorgang... Ihr Webbrowser muss JavaScript aktiviert haben... "). Es wurden keine Produkt-, Markt- oder Missionsdetails im bereitgestellten Text erwähnt. Basierend allein auf dem Firmennamen scheint das Unternehmen sich plausibel auf medizinische oder klinische Kennzahlen, Analysen oder Gesundheitssoftware zu konzentrieren, aber das ist spekulativ und wird durch die bereitgestellten Informationen nicht bestätigt. Weitere öffentliche Details wären erforderlich, um spezifischer zu werden.

Beschreibung

• Design and implement secure cloud architecture across AWS and Azure, including identity, network security, encryption, and key management • Implement cloud-native logging, monitoring, and threat detection to improve visibility and incident response • Build Infrastructure-as-Code, Policy-as-Code, and automated compliance controls • Implement and enhance CSPM, CWPP, and CNAPP capabilities • Conduct threat modeling, security architecture reviews, and risk assessments for cloud services and applications • Design and secure AI/ML environments, including MLOps pipelines, model security, inference endpoints, and AI governance • Assess and mitigate AI-specific threats, including prompt injection, model poisoning, adversarial attacks, and data leakage • Partner with engineering and data science teams to implement secure-by-design and privacy-preserving controls for regulated data • Develop automated detections, SOAR playbooks, and AI-driven threat hunting capabilities • Lead technical response to cloud and AI security incidents, including forensic analysis and remediation • Design and implement security controls supporting HIPAA, HITRUST, PCI DSS, SOC 2, NIST CSF, and NIST AI RMF requirements • Support technical readiness, evidence collection, and remediation activities for security audits and compliance assessments • Develop and maintain cloud security standards, technical guidance, and AI governance documentation • Support enterprise risk management and vendor security assessments • Integrate security throughout the DevSecOps lifecycle, including application, container, and secrets management • Develop security metrics, communicate technical risks to stakeholders, and recommend continuous security improvements • Mentor junior engineers and champion security best practices across engineering teams • Use, protect, and disclose patients’ protected health information only in accordance with HIPAA standards • Understand and comply with Information Security and HIPAA policies and procedures • Limit viewing of PHI to the absolute minimum necessary to perform assigned duties

🎯 Anforderungen

• High school diploma or equivalent required • 6+ years of experience in information security, with at least 4 years focused on cloud security engineering • Deep hands-on expertise in AWS and Microsoft Azure, including AWS GuardDuty, Security Hub, IAM Identity Center, Microsoft Defender for Cloud, Sentinel, and Entra ID • Strong knowledge of IAM, zero trust architecture, network security, encryption, and secrets management in cloud environments • Practical experience securing AI/ML systems or LLM-based applications, or demonstrable working knowledge of OWASP LLM Top 10, MITRE ATLAS, and NIST AI RMF • Proficiency in at least one scripting/programming language, with Python preferred, and infrastructure-as-code tooling • Experience with container and orchestration security, including Docker, Kubernetes, EKS, and AKS • Solid understanding of DevSecOps practices and CI/CD security integration • Hands-on experience supporting HIPAA, HITRUST CSF, PCI DSS, and SOC 2 compliance programs in cloud environments, including audit evidence and control implementation • Proficiency in Microsoft Office Suite • Strong interpersonal skills and ability to communicate well at all levels of the organization • Strong problem-solving and creative skills, with sound judgment and ability to make decisions based on accurate and timely analyses • High level of integrity and dependability, with a strong sense of urgency and results orientation • Excellent written and verbal communication skills required • Travel may be required for training and conferences • Must possess a smartphone or electronic device capable of downloading applications for multifactor authentication and security purposes • Experience with GCP in addition to AWS and Azure • Experience deploying or securing MLOps platforms such as SageMaker, Vertex AI, Azure ML, Databricks, or Kubeflow • Familiarity with AI-driven security platforms and custom detections using ML techniques • Relevant certifications such as CISSP, CCSP, HCISPP, CCSFP, AWS Security Specialty, AZ-500, GCP Professional Cloud Security Engineer, or GIAC certifications • Prior experience in healthcare, health tech, or revenue cycle management environments handling PHI at scale • Experience with red teaming or adversarial testing of AI systems • Knowledge of data privacy regulations for AI training data and model outputs, including HIPAA de-identification standards • Contributions to security communities, open-source tooling, or published research • Ability to perform the stated physical and mental job demands

🏖️ Vorteile

• Travel may be required for training, conferences, etc. • Multifactor authentication and security purposes supported through a smartphone or electronic device capable of downloading applications