Senior Information Security Engineer

Emploi pas sur LinkedIn

🕒 il y a 10 jours

🇺🇸 États-Unis – Télétravail

💵 $140 000 - $160 000 / an

⏰ Temps Plein

🟠 Senior

👮‍♂️ Cybersécurité / Ingénieur Sécurité

🦅 Parrain de Visa H1B

Cette entreprise a parrainé des visas H1B par le passé.

👻 Score fantôme 0%

Ce que ça veut dire : la probabilité que cette offre reste ouverte sans recrutement actif.Comment le lire : 60 % ou plus, on pense que c'est une offre fantôme. Un score plus bas est moins inquiétant.Comment on la calcule : ancienneté, republications, postes ouverts vs taille de l'équipe, rapidité de clôture, et si le salaire est indiqué.À noter : une estimation à partir de données publiques, pas un jugement sur l'entreprise. De vraies offres peuvent avoir un score élevé, alors prenez-le comme un indice, pas comme un fait.

Postuler Maintenant

Trouver des Emplois à Distance Similaires

Configurer une alerte email pour les nouveaux emplois

📊 Vérifiez votre score de CV pour ce poste

Améliorez vos chances d'obtenir un entretien en vérifiant votre score de CV avant de postuler.

Télécharger le CV

Reveleer

Site WebLinkedInTous les Emplois

51 - 200 employés

🏥 Santé

⚕️ Assurance santé

☁️ SaaS

Healthcare • Healthcare Insurance • SaaS

Reveleer est une entreprise de technologie de la santé spécialisée dans la fourniture d'une plateforme de bout en bout pour les soins basés sur la valeur. Leur plateforme utilise l'intelligence artificielle pour automatiser les tâches, améliorer l'efficacité et renforcer les soins aux patients en consolidant les flux de travail liés à l'ajustement des risques et à l'amélioration de la qualité. Reveleer aide les organisations de soins à rationaliser leurs opérations grâce à une acquisition de données intelligente, augmentant la productivité et garantissant des remboursements précis. Avec un focus sur l'intelligence en santé, Reveleer s'intègre aux HIEs et aux systèmes EHR pour améliorer la prestation de soins et capturer les diagnostics pertinents. Ils ont une présence significative dans l'industrie des soins de santé, travaillant avec divers plans de santé pour maximiser leur performance et les résultats des patients.

Description

• Safeguard Reveleer’s cloud-based healthcare SaaS platforms, AI/ML systems, infrastructure, and customer data • Design and maintain secure architectures across AWS, Azure, and GCP • Implement infrastructure-as-code and policy-as-code security controls • Operate CSPM/CNAPP tooling to detect misconfigurations, toxic combinations, and exposed PHI data stores • Secure containerized and serverless workloads across EKS, ECS, and Lambda • Enforce network segmentation, encryption standards, and centralized key and secrets management • Partner with Data Science and AI Engineering to secure model development, training, fine-tuning, inference, and RAG pipelines handling PHI and PII • Threat model AI features and address prompt injection, insecure output handling, training data poisoning, exfiltration, and excessive agency • Implement AI gateways, guardrails, content filtering, validation, rate limiting, and audit logging • Govern third-party and foundation model usage, including vendor reviews, data residency, retention, zero-retention, no-training, and BAA controls • Establish controls against shadow AI and secure the ML supply chain • Contribute to AI governance with Compliance and Legal • Embed security into CI/CD pipelines using SAST, DAST, SCA, secrets scanning, and IaC scanning • Perform threat modeling, secure design reviews, and code reviews for microservices, APIs, and AI-enabled features • Secure API and machine-to-machine authorization patterns • Manage software supply chain risk through SBOM generation, dependency governance, and artifact signing • Drive penetration testing, bug bounty intake, and remediation validation • Protect PHI and PII through classification, tokenization, de-identification, and DLP • Manage and tune EDR/XDR platforms and develop detection engineering and response automation • Implement identity security through Microsoft Entra ID, Conditional Access, PIM, and risk-based authentication • Govern non-human identities, service principals, workload identities, and AI agent credentials • Support Intune and MDM compliance baselines across Windows, macOS, iOS, and Android • Operate SaaS security posture management for third-party integrations and OAuth grant risk • Monitor and triage alerts, investigate incidents, and coordinate response with SOC and MDR partners • Build and maintain SIEM detection content, detection-as-code, log pipeline coverage, and MITRE ATT&CK mapping • Develop incident response runbooks, playbooks, and forensic procedures, including AI-specific scenarios • Automate response and enrichment through SOAR workflows, Python, and PowerShell • Participate in tabletop exercises, purple team activity, and post-incident reviews • Support audits and evidence collection for HIPAA, HITRUST, SOC 2 Type 2, NIST 800-53, and customer security assessments • Maintain asset and AI system inventories, risk registers, and remediation tracking • Conduct vendor and third-party risk reviews, especially for AI subprocessors and data flows • Partner with Compliance to align technical controls, policies, and standards • Contribute to security awareness and training, including responsible AI use guidance

🎯 Exigences

• Bachelor’s degree in Computer Science, Information Security, or equivalent experience • 5+ years of experience in security engineering or related technical security roles • Strong knowledge of cloud-native security across AWS, Azure, and GCP • Hands-on experience with SIEM, EDR/XDR, IAM, vulnerability management, and security automation • Familiarity with HIPAA, HITRUST, NIST, and SOC 2 requirements • Experience securing containerized and serverless workloads, such as EKS and Lambda • Preferred: CISSP, CISM, CCSP, AWS Security Specialty, or GIAC certifications • Preferred: Terraform, Ansible, or CloudFormation experience for infrastructure-as-code security • Preferred: DevSecOps pipeline and tools experience, such as Jenkins and Bitbucket • Preferred: Strong scripting skills in Python, PowerShell, or Bash • Analytical and detail-oriented with strong problem-solving skills • Ability to balance business needs with risk mitigation • Excellent communication skills for translating complex technical topics to non-technical stakeholders • Collaborative and proactive approach to continuous improvement • Must complete Reveleer’s E-Verify process as a new hire

🏖️ Avantages

• Competitive salary • Medical, Dental and Vision benefits • 401k match • Generous PTO plan