Senior Security Engineer

🕒 il y a 1 mois

🇺🇸 États-Unis – Télétravail

💵 $155 000 - $170 000 / an

⏰ Temps Plein

🟠 Senior

👮‍♂️ Cybersécurité / Ingénieur Sécurité

👻 Score fantôme 0%

Ce que ça veut dire : la probabilité que cette offre reste ouverte sans recrutement actif.Comment le lire : 60 % ou plus, on pense que c'est une offre fantôme. Un score plus bas est moins inquiétant.Comment on la calcule : ancienneté, republications, postes ouverts vs taille de l'équipe, rapidité de clôture, et si le salaire est indiqué.À noter : une estimation à partir de données publiques, pas un jugement sur l'entreprise. De vraies offres peuvent avoir un score élevé, alors prenez-le comme un indice, pas comme un fait.

Postuler Maintenant

Trouver des Emplois à Distance Similaires

Configurer une alerte email pour les nouveaux emplois

📊 Vérifiez votre score de CV pour ce poste

Améliorez vos chances d'obtenir un entretien en vérifiant votre score de CV avant de postuler.

Télécharger le CV

AgelessRx

Site WebLinkedInTous les Emplois

11 - 50 employés

🏥 Santé

🍽️ Alimentation et boissons

⚕️ Assurance santé

Healthcare • Food & Beverage • Healthcare Insurance

AgelessRx est une entreprise spécialisée dans la fourniture de solutions et traitements du sommeil sélectionnés par des experts dans le but de promouvoir une vie plus saine et plus longue. Elle propose une gamme de traitements et de solutions de suivi de la santé conçus pour la longévité générale, l'énergie et la fatigue, la gestion du poids, la santé cardiaque, la fonction cognitive, et bien plus encore. En s'appuyant sur des recherches de pointe et une équipe de médecins agréés aux États-Unis, elle vise à aider les individus à atteindre leurs objectifs de santé grâce à des thérapies personnalisées et basées sur la science. Les patients peuvent réaliser de simples évaluations en ligne, bénéficier d'une expédition rapide et gratuite, ainsi qu'un support continu en ligne ou par téléphone pour leurs traitements prescrits. AgelessRx met également l'accent sur la recherche continue et l'engagement communautaire pour rendre la science de la longévité plus accessible.

Description

• Own and evolve AgelessRx's technical security roadmap • Establish and operate repeatable security programs, controls, reporting, and documentation • Conduct security and architecture reviews for systems, vendors, integrations, and technology changes • Maintain visibility into risks, vulnerabilities, remediation priorities, owners, and timelines • Conduct and support HIPAA Security Rule risk assessments • Maintain audit-ready evidence and documentation • Plan and facilitate security and incident-response exercises • Report security posture, priorities, open risks, and remediation progress to leadership • Define identity, authentication, authorization, privileged-access, cloud, endpoint, and email-security standards • Partner with IT on SSO, MFA, privileged access management, endpoint controls, access reviews, and device security • Own vulnerability management across infrastructure, endpoints, applications, and other technology • Embed security into the software development lifecycle • Review architecture, authentication flows, sensitive-data handling, payments, and security-sensitive product areas • Develop threat models for products, features, services, and integrations involving PHI or sensitive information • Deploy and improve SAST, SCA, dependency-scanning, and software-supply-chain controls • Establish application-security finding remediation processes and secure-development guidance • Coordinate penetration testing and vulnerability disclosure and triage • Partner with Engineering to identify risks before production • Support HIPAA audits, investigations, incident response, and compliance activities • Evaluate vendors and partners handling PHI or sensitive information • Serve as technical security owner for AI governance • Maintain visibility into AI systems accessing PHI or sensitive data • Assess AI tools and vendors, including data flows, retention, model training, access controls, subprocessors, and other risks • Extend threat modeling to AI-enabled products, addressing prompt injection, model access, data leakage, output handling, and PHI exposure • Translate evolving healthcare and AI requirements into technical controls • Align AI risk management with a recognized framework and maintain evidence • Review and implement approved MCPs and other AI integrations • Support policies governing employee use of AI tools

🎯 Exigences

• 5+ years of experience in security engineering, cybersecurity, or a related technical security role • Hands-on depth across at least two major security domains, such as application/product security, cloud and identity security, vulnerability management, security operations, or security governance • Experience securing environments subject to HIPAA or comparable regulatory requirements and translating regulatory obligations into technical controls • Strong working knowledge of at least one major cloud provider and associated IAM and security practices • Strong understanding of identity and access management, including SSO, SAML/OIDC, MFA, privileged access, and least-privilege principles • Experience with application-security tooling and practices, including SAST, SCA, dependency management, threat modeling, and secure software development • Experience establishing or operating recurring security programs such as vulnerability management, access reviews, penetration testing, security assessments, or incident-response exercises • Experience assessing and prioritizing vulnerabilities based on exploitability, business impact, sensitive-data exposure, and practical risk • Working understanding of AI/LLM security risks and governing AI systems in regulated environments • Strong written communication and documentation skills • Ability to operate autonomously and establish structure in an evolving environment • Preferred: direct HIPAA Security Rule risk analyses, OCR audits, healthcare security investigations, or breach response • Preferred: healthcare technology, telehealth, EHR integrations, or HL7/FHIR systems experience • Preferred: building or maturing a security program as an early or first dedicated security hire • Preferred: AI governance or AI risk-management programs, including NIST AI RMF, ISO/IEC 42001, or similar frameworks • Preferred: evaluating AI vendors or systems processing PHI or regulated data • Preferred: emerging healthcare and AI regulatory requirements • Preferred: Docker experience • Relevant security certifications such as OSCP, HCISPP, CISSP, or cloud-security certifications are valued but not required