Lead Cybersecurity Engineer

Stelle nicht auf LinkedIn

🕒 vor 7 Tagen

🇺🇸 Vereinigte Staaten – Remote

⏰ Vollzeit

🟠 Senior

👮‍♂️ IT-Sicherheitsingenieur

👻 Geisterscore 16%

Was es bedeutet: wie wahrscheinlich diese Stelle offen bleibt, ohne dass aktiv eingestellt wird.So liest du es: 60 % oder höher heißt, wir halten das für einen Geisterjob. Niedrigere Werte sind weniger bedenklich.Wie wir werten: Dauer offen, Neuveröffentlichungen, offene Stellen vs Teamgröße, wie schnell Stellen geschlossen werden, und ob ein Gehalt angegeben ist.Hinweis: eine Schätzung aus öffentlichen Daten, kein Urteil über das Unternehmen. Echte Stellen können hoch punkten, nutze es also als Hinweis, nicht als Fakt.

Jetzt Bewerben

Ähnliche Remote-Jobs finden

E-Mail-Benachrichtigung für neue Jobs einrichten

📊 Überprüfen Sie Ihre Lebenslauf-Bewertung für diese Stelle

Verbessern Sie Ihre Chancen auf ein Vorstellungsgespräch, indem Sie Ihre Lebenslauf-Bewertung vor der Bewerbung überprüfen.

Lebenslauf hochladen

OptiMantra

WebsiteLinkedInAlle Stellen

11 - 50 Mitarbeiter

Gegründet 2011

🏥 Gesundheitswesen

🛡️ Versicherung

💼 Beratung

Healthcare • Insurance • Consulting

OptiMantra ist eine cloud-basierte, hochmoderne elektronische Gesundheitsakte (EMR) und Praxisverwaltungsplattform, die für integrative, funktionelle, primäre Gesundheitsversorgung, Verhaltensgesundheit, Psychiatrie, Medspa und multidisziplinäre Kliniken entwickelt wurde. Die Software bietet umfassende Praxistools, einschließlich anpassbarer klinischer Dokumentation und SOAP-Vorlagen, Terminplanung, Telemedizin, Abrechnung und elektronischen Abrechnungen, Point-of-Sale- und Bestandsmanagement, sicheren Patientenportalen, automatisierten Erinnerungen und Drittanbieter-Integrationen—bereitgestellt als einfach zu bedienendes SaaS-Produkt für Praxen von Einzel- bis Mehrfachpraktiker. OptiMantra betont HIPAA-konforme Arbeitsabläufe, spezialitätsspezifische Vorlagen, Onboarding/Support sowie Betriebs- und Finanzberichterstattung, um Praxen bei der Optimierung der Patientenversorgung und Verwaltung zu unterstützen.

Beschreibung

• Lead the company’s cybersecurity program across Cerbo and OptiMantra • Protect protected health information (PHI) and production platforms serving thousands of clinicians and millions of patients • Develop, implement, and continuously improve a unified security program across both products • Own the technical implementation and ongoing management of SOC 2 Trust Services Criteria and HIPAA Security Rule requirements across AWS environments • Lead compliance documentation, remediation, control narratives, system and data-flow documentation, scope determinations, and security gap closure • Serve as technical point of contact for auditors and assessors and coordinate audit activities and milestones • Secure and harden production AWS environments, including cloud infrastructure, Kubernetes and container environments, databases, networking, web application security, and disaster recovery environments • Implement and operate AWS security controls and tooling, including IAM, privileged access management, MFA, least-privilege access, security monitoring, encryption and key management, vulnerability management, and audit logging • Establish common standards for access, tenant isolation, data protection, backup, and disaster recovery • Establish and operate centralized logging, alerting, threat detection, and security response processes • Own security incident response and vulnerability management programs, including playbooks, tabletop exercises, breach assessment, vulnerability scanning, remediation tracking, and coordination with Engineering and external security providers • Lead penetration testing, DAST, security assessments, findings remediation, and retesting • Own security policies, procedures, workforce security, security awareness, phishing simulations, HIPAA training, and compliance tracking • Lead identity and endpoint security practices for corporate systems, users, and sensitive data • Manage third-party security and vendor risk, including security assessments, business associate agreements, subprocessor diligence, and vendor oversight • Serve as technical security partner for customers and strategic partners, leading security questionnaires, architecture reviews, and security discussions • Support customer and partner security requirements during sales and contracting, including incident notification, data retention and export, backup and disaster recovery, AI, and subprocessors • Report to the Chief Technology Officer and collaborate with DevOps, Engineering, IT, Product, and other stakeholders

🎯 Anforderungen

• 5+ years of experience in cybersecurity or information security, with increasing responsibility in security engineering • 2+ years of experience securing production cloud environments, preferably AWS, including cloud identity and access management, network security, logging/monitoring, and security controls • Demonstrated experience with the AWS security ecosystem, including IAM, CloudTrail, GuardDuty, Security Hub, KMS, VPC security and related AWS security services • Experience implementing, maintaining and evidencing security controls aligned with frameworks and standards such as NIST, HITRUST, ISO 27001, HIPAA, SOC 2, or similar • Experience securing Kubernetes and containerized production environments, including identity, network security, image security, and runtime controls • Experience serving as a technical owner during a third-party security audit, assessment, or certification • Experience deploying, configuring, and operating cybersecurity tools in production, such as EDR, SIEM/log management, vulnerability management, WAF, or similar technologies • Demonstrated ability to lead complex cybersecurity initiatives, establish security standards and processes, and serve as a technical subject-matter expert across the organization • Bachelor's degree in cybersecurity, information security or relevant field (preferred) • Experience working in a PE-backed, high-growth, or rapidly scaling organization (preferred) • Experience working with healthcare technology, SaaS or other technology-enabled B2B businesses (preferred) • Experience securing multi-tenant SaaS environments, including tenant isolation, access controls, and shared infrastructure (preferred) • Experience working across cloud, DevOps, SRE, or application security environments, with exposure to infrastructure as code, CI/CD, Kubernetes, secure code practices, or vulnerability remediation (preferred)

🏖️ Vorteile

• Competitive compensation based on experience • Paid Time Off and company holidays • Comprehensive health, dental and vision benefits • Short-term and long-term disability Insurance • 401k plan with matching company contribution • Real ownership and impact in a fast-growing health tech company