Cloud Security Engineer

🔥 28 minutes ago

🏈 Ohio – Remote

🏈 Ohio – Remote

💵 $115k - $150k / year

⏰ Full Time

🟡 Mid-level

🟠 Senior

👮‍♂️ Cybersecurity / Security Engineer

👻 Ghost score 0%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Gifthealth

WebsiteLinkedInAll Job Openings

501 - 1000 employees

Founded 2020

🏥 Healthcare

📦 Logistics

💼 Consulting

💰 $40M Private Equity Round - GiftHealth on 2023-04

Healthcare • Logistics • Consulting

Gifthealth is a technology-enabled patient access and prescription fulfillment company that connects patients, prescribers, pharmacies, and pharmaceutical manufacturers through a unified digital platform. It streamlines enrollment, electronic benefits verification, e-prior authorization, and payment/affordability support while managing pharmacy fulfillment and patient support services. The platform also provides manufacturers with actionable data and insights on patient journeys and brand performance, driving faster, more reliable medication access.

📋 Description

• Develop and maintain security standards and reference architectures for cloud environments • Participate in architecture reviews for new cloud services, platforms, and major infrastructure changes • Evaluate proposed architectures for security risks and recommend appropriate controls • Establish secure patterns for cloud networking, identity, encryption, logging, storage, compute, and managed services • Evaluate security boundaries between AWS-managed infrastructure and externally managed platforms such as Heroku and Snowflake • Identify insecure cloud configurations and excessive permissions • Assess cloud environments against security standards and benchmarks • Prioritize and coordinate remediation of cloud security findings • Establish least-privilege access models and controls for administrative and privileged cloud access • Develop security controls and configuration baselines for compute, storage, databases, networking, serverless services, VPNs, data warehouses, APIs, and secrets management • Implement cloud security guardrails with engineering teams • Ensure cloud logging and security telemetry support monitoring • Develop or assist with detections for suspicious cloud activity • Partner with Security Operations to investigate cloud security events • Embed security requirements into Infrastructure-as-Code • Develop automated checks, preventative controls, reusable secure modules, and templates • Automate security processes using APIs, scripts, and cloud-native services • Support vulnerability management across cloud infrastructure and workloads • Coordinate vulnerability remediation with infrastructure and engineering teams • Develop cloud security standards and technical requirements • Map cloud controls to security and compliance requirements • Provide technical evidence for audits and assessments • Evaluate AI-enabled cloud services such as Amazon Q for security and data-handling implications • Collaborate regularly with Infrastructure, Platform Engineering, DevOps, Software Engineering, IAM, and Security teams • Report to the Director of Security

🎯 Requirements

• 3+ years of experience in cloud engineering, cloud security, infrastructure engineering, DevOps, security engineering, or a related field • Hands-on experience securing environments within at least one major public cloud platform • Strong understanding of cloud IAM, networking, encryption, secrets management, logging and monitoring, compute and storage security, vulnerability management, and cloud-native security services • Ability to secure workloads across a hybrid environment spanning AWS and externally managed platforms such as Heroku and Snowflake • Experience scripting or automating infrastructure and security activities • Understanding of least privilege and cloud-native identity models • Ability to evaluate cloud architectures and communicate security requirements clearly to technical teams • Must be able to work at a computer for extended periods • Must be able to communicate effectively, verbally and in writing • Must be able to handle and access sensitive cloud infrastructure and security data in compliance with organizational requirements • Must be able to respond to critical cloud security incidents outside standard working hours when required • Relevant AWS, cloud security, Kubernetes, or security certifications are a plus, but not required • Preferred: strong AWS security experience, including multi-account cloud environments • Preferred: experience with Kubernetes, containers, or serverless technologies • Preferred: experience with CSPM or CNAPP platforms and familiarity with CIS cloud benchmarks, NIST guidance, or other cloud security frameworks • Preferred: familiarity with Site-to-Site and client VPN architectures • Preferred: experience with column-level masking, row-level security, or PHI field-level governance in Snowflake or BigQuery • Preferred: experience with Terraform or CloudFormation and preventative cloud guardrails • Preferred: experience working within regulated environments

🏖️ Benefits

• Full-time employment • Standard business hours • Flexibility for cloud security incident response or urgent remediation of high-risk findings • Equal Opportunity Employer committed to an inclusive environment