Senior Cloud Security Engineer

🕒 il y a 1 mois

🇺🇸 États-Unis – Télétravail

💵 $150 000 - $200 000 / an

⏰ Temps Plein

🟠 Senior

👮‍♂️ Cybersécurité / Ingénieur Sécurité

🦅 Parrain de Visa H1B

Cette entreprise a parrainé des visas H1B par le passé.

👻 Score fantôme 13%

Ce que ça veut dire : la probabilité que cette offre reste ouverte sans recrutement actif.Comment le lire : 60 % ou plus, on pense que c'est une offre fantôme. Un score plus bas est moins inquiétant.Comment on la calcule : ancienneté, republications, postes ouverts vs taille de l'équipe, rapidité de clôture, et si le salaire est indiqué.À noter : une estimation à partir de données publiques, pas un jugement sur l'entreprise. De vraies offres peuvent avoir un score élevé, alors prenez-le comme un indice, pas comme un fait.

Postuler Maintenant

Trouver des Emplois à Distance Similaires

Configurer une alerte email pour les nouveaux emplois

📊 Vérifiez votre score de CV pour ce poste

Améliorez vos chances d'obtenir un entretien en vérifiant votre score de CV avant de postuler.

Télécharger le CV

ComPsych

Site WebLinkedInTous les Emplois

1001 - 5000 employés

Fondée en 1984

🏥 Santé

💼 Conseil

📦 Logistique

Healthcare • Consulting • Logistics

ComPsych est un leader des programmes d'assistance aux employés (EAP), offrant des services de santé mentale et de bien-être aux employés et à leurs familles. L'entreprise se concentre sur l'amélioration de la productivité au travail en fournissant des services de soutien qui aident les employés à gérer les défis personnels et professionnels. Les solutions de ComPsych comprennent le conseil, l'intervention en cas de crise et divers programmes de bien-être conçus pour améliorer la satisfaction générale et la performance des employés.

Description

• Own cloud security posture management across configurations, workloads, and entitlements using CSPM, CWPP, and CIEM • Design and implement identity and access management, least privilege, federation, single sign-on, secrets management, privileged access, and workload/non-human identity controls • Design network segmentation, zero-trust access, firewalls, web application firewalls, and traffic inspection across cloud and hybrid networks • Implement container security, encryption, key management, and policy-as-code guardrails across AWS and Azure • Shift application security left in CI/CD through static, dynamic, dependency, and software supply-chain scanning • Perform threat modeling, secrets management, and secure-by-design reviews • Lead data classification, encryption, tokenization, key management, data loss prevention, and privacy-by-design initiatives for PHI and ePHI • Design guardrails, data protection, abuse controls, and misuse controls for AI, machine learning, and generative AI systems • Address AI risks including prompt injection, model poisoning, data poisoning, and sensitive data leakage • Tune SIEM and cloud-native detections, drive event correlation, and lead incident response • Run vulnerability scanning, coordinate penetration testing, and drive findings through remediation • Maintain security baselines, configuration compliance, controls, logging, and audit evidence • Coach engineers across teams and make secure practices the default • Perform other duties as assigned

🎯 Exigences

• Bachelor’s degree in Computer Science or a related field • Security certifications such as CISSP or a cloud security specialty are a plus • 6 to 9 years of security engineering experience, stated as a guideline rather than a hard requirement • Hands-on cloud experience • Experience using agentic AI tools as a primary surface for security engineering, analysis, detection, and automation • Senior-level breadth across network security, application security, cloud security, information security, and AI security, with depth in several areas • Experience building and operating controls as code, including policy as code, infrastructure as code, automation, and detections, in production • Experience carrying on-call and incident load • Cloud security expertise in AWS and Azure, including IAM, least privilege, federation, SSO, secrets management, privileged access, workload and non-human identities, network security, container security, image scanning, runtime protection, key management, encryption, and CSPM/CWPP/CIEM • Data protection and privacy engineering experience, including data classification, encryption, tokenization, key management, DLP, privacy by design, regulated health data, and data residency • Application and product security expertise, including secure SDLC, threat modeling, static analysis, dynamic analysis, software composition analysis, secrets security, software supply chain security, and API security • Detection, response, and vulnerability management expertise, including SIEM, cloud-native detection, log and event correlation, vulnerability scanning and management, penetration testing coordination, and remediation to closure • AI and generative AI security awareness, including prompt injection, data poisoning, model poisoning, and data leakage • Familiarity with OWASP Top 10 for LLM Applications and MITRE ATLAS is a plus • Experience with HIPAA, HITRUST, SOC 2, NIST, ISO 27001, ISO 42001, and GDPR frameworks • Ability to self-start, multitask, and work autonomously • Excellent organizational and project management skills • Effective interpersonal and communication skills

🏖️ Avantages

• Paid Time Off (PTO) • Medical insurance • Dental insurance • Vision insurance • 401(k) with match • Robust Employee Assistance Program (EAP) • Wellness program • Full benefits package