Senior Platform Security Engineer, SOC 2 / HIPAA

🕒 il y a 8 jours

🇺🇸 États-Unis – Télétravail

💵 $14 583 - $17 500 / mois

⏰ Temps Plein

🟠 Senior

🏗️ Ingénieur Plateforme

👻 Score fantôme 0%

Ce que ça veut dire : la probabilité que personne ne recrute vraiment pour cette offre.Comment le lire : 60 % ou plus, on pense que c'est une offre fantôme. Un score plus bas est moins inquiétant.Comment on la calcule : ancienneté, republications, postes ouverts vs taille de l'équipe, rapidité de clôture, et si le salaire est indiqué.À noter : une estimation à partir de données publiques, pas un jugement sur l'entreprise. De vraies offres peuvent avoir un score élevé, alors prenez-le comme un indice, pas comme un fait.

Postuler Maintenant

Trouver des Emplois à Distance Similaires

Atomic - Remote Jobs

Site WebLinkedInTous les Emplois

1 - 10 employés

📣 Marketing

📦 Logistique

✈️ Tourisme

Marketing • Logistics • Travel

Atomic - Remote Jobs est une plateforme de recrutement qui connecte les professionnels de la technologie en Amérique latine et au Canada avec des opportunités de carrière à distance, au sein de startups et d'entreprises établies à travers le monde. Elle gère un tableau d'offres d'emploi à distance et propose un support personnalisé aux candidats ainsi qu'un service de mise en relation, en mettant l'accent sur les postes en ingénierie, design, marketing et opérations, tout en soulignant la transparence, la compatibilité à long terme et les arrangements de travail axés sur le télétravail.

Description

• Design identity, authentication, authorization, secrets storage, and production-access controls • Write the architecture and code for security, privacy, and compliance controls • Define isolation between environments, tenants, workloads, and sensitive data • Build audit logs and change history suitable for external auditor testing • Maintain SOC 2 Type II and HIPAA technical controls • Automate access reviews and evidence collection • Close technical audit findings and work with auditors on testing • Build secure CI/CD release paths and infrastructure-as-code controls with production approvals • Publish shared modules and reference implementations • Run threat models for critical workflows and convert findings into engineering requirements • Review security-sensitive code, infrastructure, and architecture changes • Own engineering-side logging, detection, runbooks, and escalation paths • Lead or support incident investigation and containment • Participate in tabletop exercises with the Trust Product Manager and leadership • Translate NIST requirements into controls and priorities • Provide leadership with a technical roadmap for state and federal environments toward FedRAMP-aligned practices • Serve as senior engineer and technical lead for platform security, privacy, and compliance controls • Collaborate with the Trust Product Manager, Product leadership, Engineering leadership, auditors, and other engineers

🎯 Exigences

• 7+ years of software engineering experience • A few years as the senior or lead engineer on production systems • Committed application and infrastructure code in the last year or two • Hands-on SOC 2 Type II and HIPAA experience, including implementing and operating controls through an audit • Experience building or operating a system holding protected health information • Cloud-native production experience, ideally on AWS • Experience with infrastructure as code and CI/CD pipelines with approval steps • Experience setting up production environments independently • Experience designing authentication, role- or attribute-based authorization, service identities, secrets management, production access controls, and audit logging • Threat modeling carried through to shipped controls • Experience closing audit, penetration-test, or incident findings • Ability to evaluate what to enforce in software versus process and explain the trade-off to product leads, auditors, and engineers • Ability to work autonomously while architecture and operating models are still taking shape • Must be based in the U.S. • Bonus: NIST 800-53 or other 800-series controls mapped to system changes • Bonus: FedRAMP or ISO 27001 experience • Bonus: Automated evidence collection or continuous control monitoring accepted by an auditor • Bonus: Incident-response runbooks or tabletop exercise experience • Bonus: Node, TypeScript, and AWS in the same production environment • Bonus: Software experience for government, healthcare, or fintech customers

🏖️ Avantages

• Fully remote role within the U.S. • Full-time employment through an Employer of Record (EOR) • Real technical ownership of design decisions and control-building priorities • Direct collaboration with Product & Engineering leadership • Mission-driven impact protecting the data of families who rely on public benefits

📊 Vérifiez votre score de CV pour ce poste

Améliorez vos chances d'obtenir un entretien en vérifiant votre score de CV avant de postuler.

Télécharger le CV