Staff Cloud Security Engineer

🕒 il y a 8 jours

🇺🇸 États-Unis – Télétravail

💵 $151 000 - $178 500 / an

⏰ Temps Plein

🔴 Expert

👮‍♂️ Cybersécurité / Ingénieur Sécurité

👻 Score fantôme 1%

Ce que ça veut dire : la probabilité que cette offre reste ouverte sans recrutement actif.Comment le lire : 60 % ou plus, on pense que c'est une offre fantôme. Un score plus bas est moins inquiétant.Comment on la calcule : ancienneté, republications, postes ouverts vs taille de l'équipe, rapidité de clôture, et si le salaire est indiqué.À noter : une estimation à partir de données publiques, pas un jugement sur l'entreprise. De vraies offres peuvent avoir un score élevé, alors prenez-le comme un indice, pas comme un fait.

Postuler Maintenant

Trouver des Emplois à Distance Similaires

Configurer une alerte email pour les nouveaux emplois

📊 Vérifiez votre score de CV pour ce poste

Améliorez vos chances d'obtenir un entretien en vérifiant votre score de CV avant de postuler.

Télécharger le CV

AnswersNow

Site WebLinkedInTous les Emplois

11 - 50 employés

🏥 Santé

💼 Conseil

⚕️ Assurance santé

💰 €11 000 000 Series A en 2023-02

Healthcare • Consulting • Healthcare Insurance

AnswersNow est une plateforme virtuelle dédiée à la fourniture de thérapie par analyse comportementale appliquée (ABA) pour les familles, rendant un soutien de qualité facilement accessible. L'entreprise offre des soins personnalisés, basés sur des preuves scientifiques, adaptés aux besoins individuels des enfants autistes, en les connectant avec des analystes comportementaux certifiés pour des sessions individuelles. Engagé à autonomiser les familles, AnswersNow garantit que la thérapie peut être conduite dans un cadre confortable et familier, optimisant ainsi l'expérience de soins sans longs délais d'attente.

Description

• Architect, secure, and continuously harden the AWS environment, including IAM, VPC, KMS, CloudTrail, GuardDuty, Security Hub, Config, and WAF • Secure serverless and data layers including Lambda, S3, and PostgreSQL/RDS/Aurora through encryption, least-privilege access, network isolation, backup integrity, and audit logging • Implement Infrastructure-as-Code security guardrails and policy-as-code • Own secrets management, key management, and certificate lifecycle • Manage and harden Amazon EKS infrastructure, including cluster security, network policies, and container runtime security • Secure APIs and application stack, including authentication/authorization, session management, rate limiting, input validation, and OWASP Top 10/API Top 10 risks • Embed security into the SDLC through threat modeling, secure design reviews, SAST/DAST, dependency and container scanning, and CI/CD pipeline security • Secure the proprietary real-time video platform, including WebRTC/media transport, session access controls, recording storage, and encryption • Run vulnerability management and penetration testing, including vendor selection, scoping, and remediation tracking • Establish company-wide AI usage policies and governance frameworks • Architect and secure in-product AI/ML capabilities against OWASP LLM Top 10 vulnerabilities • Implement privacy guardrails for PHI/PII in model training, fine-tuning, and prompt contexts • Define model security controls and secure artifacts, endpoints, dependencies, and access controls • Build monitoring, telemetry, and audit logging across AI/ML workflows • Own SOC 2 Type I and Type II readiness, control design, evidence collection, auditor management, and ongoing compliance • Own HIPAA Security Rule compliance, including risk assessments, policies, BAAs, breach notification procedures, and audit readiness • Tune Vanta integrations, automate evidence collection, and drive remediation • Maintain security policies, risk register, and vendor risk management program • Support customer and payer security questionnaires and due diligence • Manage endpoint security with outsourced IT, including MDM, disk encryption, EDR, patching, hardening baselines, and device compliance • Own identity and access management, including SSO, MFA, RBAC, joiner/mover/leaver processes, and periodic access reviews • Run security awareness and HIPAA training programs with People Ops • Build logging, monitoring, alerting, and SIEM capabilities • Develop and test the incident response plan, run tabletop exercises, and lead incident response • Partner with engineering on disaster recovery, backup, and business continuity planning • Define the security roadmap and communicate risk to the CTO and executive team • Mentor engineers and build a security-conscious culture, including a security champions model • Build the business case for tools, vendors, and future security headcount

🎯 Exigences

• 8+ years in security engineering, with significant hands-on experience securing production cloud environments, ideally AWS-heavy • Deep AWS security expertise (IAM, networking, encryption/KMS, logging and detection services, serverless security) • Experience securing PostgreSQL and other data stores containing regulated or sensitive data • Strong application and API security background, with ability to review code and architecture and work effectively with developers • Direct experience owning or leading a SOC 2 audit (Type I and/or Type II) and HIPAA compliance, ideally in healthcare or health-tech handling PHI • Experience with Infrastructure-as-Code (Pulumi, CloudFormation, or CDK) and CI/CD security • Experience with AI security, LLM application security, and OWASP LLM Top 10 vulnerabilities • Strong incident response experience • Excellent communication with engineers, executives, auditors, and customers • Experience with compliance automation platforms such as Vanta, Drata, or Secureframe (nice to have) • Experience securing real-time communication or video platforms (WebRTC) (nice to have) • Familiarity with HITRUST, ISO 27001, or NIST frameworks (nice to have) • Experience at a startup or scale-up where you built a security program from scratch (nice to have) • Relevant certifications such as AWS Security Specialty, CISSP, CCSP, OSCP, or similar (nice to have) • Experience with pediatric or behavioral health data and privacy considerations for minors' information (nice to have) • Legally authorized to work in the United States

🏖️ Avantages

• Equity options in a high-growth, venture-backed company • Comprehensive medical, dental, and vision • Generous PTO • Remote-first flexibility