Senior Platform Security Engineer, SOC 2 / HIPAA

Job not on LinkedIn

🔥 0 minutes ago

🇺🇸 United States – Remote

💵 $14.6k - $17.5k / month

⏰ Full Time

🟠 Senior

🏗️ Platform Engineer

👻 Ghost score 0%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Atomic - Remote Jobs

WebsiteLinkedInAll Job Openings

1 - 10 employees

📣 Marketing

📦 Logistics

✈️ Travel

Marketing • Logistics • Travel

Atomic - Remote Jobs is a recruitment platform that connects tech professionals in Latin America and Canada with remote career opportunities at startups and established companies worldwide. It operates a remote job board and offers personalized candidate support and matching, focusing on roles in engineering, design, marketing, and operations while emphasizing transparency, long-term career fit, and remote-first work arrangements.

📋 Description

• Design identity, authentication, authorization, secrets storage, and production-access controls • Write the architecture and code for security, privacy, and compliance controls • Define isolation between environments, tenants, workloads, and sensitive data • Build audit logs and change history suitable for external auditor testing • Maintain SOC 2 Type II and HIPAA technical controls • Automate access reviews and evidence collection • Close technical audit findings and work with auditors on testing • Build secure CI/CD release paths and infrastructure-as-code controls with production approvals • Publish shared modules and reference implementations • Run threat models for critical workflows and convert findings into engineering requirements • Review security-sensitive code, infrastructure, and architecture changes • Own engineering-side logging, detection, runbooks, and escalation paths • Lead or support incident investigation and containment • Participate in tabletop exercises with the Trust Product Manager and leadership • Translate NIST requirements into controls and priorities • Provide leadership with a technical roadmap for state and federal environments toward FedRAMP-aligned practices • Serve as senior engineer and technical lead for platform security, privacy, and compliance controls • Collaborate with the Trust Product Manager, Product leadership, Engineering leadership, auditors, and other engineers

🎯 Requirements

• 7+ years of software engineering experience • A few years as the senior or lead engineer on production systems • Committed application and infrastructure code in the last year or two • Hands-on SOC 2 Type II and HIPAA experience, including implementing and operating controls through an audit • Experience building or operating a system holding protected health information • Cloud-native production experience, ideally on AWS • Experience with infrastructure as code and CI/CD pipelines with approval steps • Experience setting up production environments independently • Experience designing authentication, role- or attribute-based authorization, service identities, secrets management, production access controls, and audit logging • Threat modeling carried through to shipped controls • Experience closing audit, penetration-test, or incident findings • Ability to evaluate what to enforce in software versus process and explain the trade-off to product leads, auditors, and engineers • Ability to work autonomously while architecture and operating models are still taking shape • Must be based in the U.S. • Bonus: NIST 800-53 or other 800-series controls mapped to system changes • Bonus: FedRAMP or ISO 27001 experience • Bonus: Automated evidence collection or continuous control monitoring accepted by an auditor • Bonus: Incident-response runbooks or tabletop exercise experience • Bonus: Node, TypeScript, and AWS in the same production environment • Bonus: Software experience for government, healthcare, or fintech customers

🏖️ Benefits

• Fully remote role within the U.S. • Full-time employment through an Employer of Record (EOR) • Real technical ownership of design decisions and control-building priorities • Direct collaboration with Product & Engineering leadership • Mission-driven impact protecting the data of families who rely on public benefits