Lead Cybersecurity Engineer

Emploi pas sur LinkedIn

🕒 il y a 7 jours

🇺🇸 États-Unis – Télétravail

⏰ Temps Plein

🟠 Senior

👮‍♂️ Cybersécurité / Ingénieur Sécurité

👻 Score fantôme 16%

Ce que ça veut dire : la probabilité que cette offre reste ouverte sans recrutement actif.Comment le lire : 60 % ou plus, on pense que c'est une offre fantôme. Un score plus bas est moins inquiétant.Comment on la calcule : ancienneté, republications, postes ouverts vs taille de l'équipe, rapidité de clôture, et si le salaire est indiqué.À noter : une estimation à partir de données publiques, pas un jugement sur l'entreprise. De vraies offres peuvent avoir un score élevé, alors prenez-le comme un indice, pas comme un fait.

Postuler Maintenant

Trouver des Emplois à Distance Similaires

Configurer une alerte email pour les nouveaux emplois

📊 Vérifiez votre score de CV pour ce poste

Améliorez vos chances d'obtenir un entretien en vérifiant votre score de CV avant de postuler.

Télécharger le CV

OptiMantra

Site WebLinkedInTous les Emplois

11 - 50 employés

Fondée en 2011

🏥 Santé

🛡️ Assurance

💼 Conseil

Healthcare • Insurance • Consulting

OptiMantra est une plateforme de gestion pratique et de dossiers médicaux électroniques (DME) de nouvelle génération, basée sur le cloud, conçue pour les soins intégratifs, fonctionnels, de première ligne, la santé comportementale, la psychiatrie, les medspa et les cliniques multidisciplinaires. Le logiciel fournit des outils de gestion de bout en bout, y compris des modèles de chartes cliniques et SOAP personnalisables, la planification, la télémédecine, la facturation et les réclamations électroniques, la gestion des points de vente et des stocks, des portails patients sécurisés, des rappels automatisés et des intégrations tierces - le tout présenté sous forme de produit SaaS convivial pour les petites pratiques jusqu'aux pratiques multi-praticiens. OptiMantra met l'accent sur des flux de travail conformes à la HIPAA, des modèles spécifiques aux spécialités, l'intégration/déploiement et le support, ainsi que des rapports opérationnels et financiers pour aider les pratiques à rationaliser la prestation des soins et l'administration.

Description

• Lead the company’s cybersecurity program across Cerbo and OptiMantra • Protect protected health information (PHI) and production platforms serving thousands of clinicians and millions of patients • Develop, implement, and continuously improve a unified security program across both products • Own the technical implementation and ongoing management of SOC 2 Trust Services Criteria and HIPAA Security Rule requirements across AWS environments • Lead compliance documentation, remediation, control narratives, system and data-flow documentation, scope determinations, and security gap closure • Serve as technical point of contact for auditors and assessors and coordinate audit activities and milestones • Secure and harden production AWS environments, including cloud infrastructure, Kubernetes and container environments, databases, networking, web application security, and disaster recovery environments • Implement and operate AWS security controls and tooling, including IAM, privileged access management, MFA, least-privilege access, security monitoring, encryption and key management, vulnerability management, and audit logging • Establish common standards for access, tenant isolation, data protection, backup, and disaster recovery • Establish and operate centralized logging, alerting, threat detection, and security response processes • Own security incident response and vulnerability management programs, including playbooks, tabletop exercises, breach assessment, vulnerability scanning, remediation tracking, and coordination with Engineering and external security providers • Lead penetration testing, DAST, security assessments, findings remediation, and retesting • Own security policies, procedures, workforce security, security awareness, phishing simulations, HIPAA training, and compliance tracking • Lead identity and endpoint security practices for corporate systems, users, and sensitive data • Manage third-party security and vendor risk, including security assessments, business associate agreements, subprocessor diligence, and vendor oversight • Serve as technical security partner for customers and strategic partners, leading security questionnaires, architecture reviews, and security discussions • Support customer and partner security requirements during sales and contracting, including incident notification, data retention and export, backup and disaster recovery, AI, and subprocessors • Report to the Chief Technology Officer and collaborate with DevOps, Engineering, IT, Product, and other stakeholders

🎯 Exigences

• 5+ years of experience in cybersecurity or information security, with increasing responsibility in security engineering • 2+ years of experience securing production cloud environments, preferably AWS, including cloud identity and access management, network security, logging/monitoring, and security controls • Demonstrated experience with the AWS security ecosystem, including IAM, CloudTrail, GuardDuty, Security Hub, KMS, VPC security and related AWS security services • Experience implementing, maintaining and evidencing security controls aligned with frameworks and standards such as NIST, HITRUST, ISO 27001, HIPAA, SOC 2, or similar • Experience securing Kubernetes and containerized production environments, including identity, network security, image security, and runtime controls • Experience serving as a technical owner during a third-party security audit, assessment, or certification • Experience deploying, configuring, and operating cybersecurity tools in production, such as EDR, SIEM/log management, vulnerability management, WAF, or similar technologies • Demonstrated ability to lead complex cybersecurity initiatives, establish security standards and processes, and serve as a technical subject-matter expert across the organization • Bachelor's degree in cybersecurity, information security or relevant field (preferred) • Experience working in a PE-backed, high-growth, or rapidly scaling organization (preferred) • Experience working with healthcare technology, SaaS or other technology-enabled B2B businesses (preferred) • Experience securing multi-tenant SaaS environments, including tenant isolation, access controls, and shared infrastructure (preferred) • Experience working across cloud, DevOps, SRE, or application security environments, with exposure to infrastructure as code, CI/CD, Kubernetes, secure code practices, or vulnerability remediation (preferred)

🏖️ Avantages

• Competitive compensation based on experience • Paid Time Off and company holidays • Comprehensive health, dental and vision benefits • Short-term and long-term disability Insurance • 401k plan with matching company contribution • Real ownership and impact in a fast-growing health tech company