Senior Cloud Security Engineer

🔥 16 hours ago

🇺🇸 United States – Remote

💵 $150k - $200k / year

⏰ Full Time

🟠 Senior

👮‍♂️ Cybersecurity / Security Engineer

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

👻 Ghost score 0%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

ComPsych

WebsiteLinkedInAll Job Openings

1001 - 5000 employees

Founded 1984

🏥 Healthcare

💼 Consulting

📦 Logistics

Healthcare • Consulting • Logistics

ComPsych is a leading provider of employee assistance programs (EAP), offering mental health and wellness services to employees and their families. The company focuses on improving workplace productivity by providing support services that help employees manage personal and work-related challenges. ComPsych's solutions include counseling, crisis intervention, and various wellness programs designed to enhance overall employee satisfaction and performance.

📋 Description

• Own cloud security posture management across configurations, workloads, and entitlements across AWS and Azure • Design and implement IAM, least privilege, federation, SSO, secrets management, privileged access, identity controls, network segmentation, container security, encryption, key management, and policy-as-code guardrails • Shift application security left in CI/CD through static, dynamic, dependency, and software supply chain scanning, threat modeling, secrets management, and secure-by-design reviews • Design segmentation, zero-trust access, firewalls, WAFs, and traffic inspection across cloud and hybrid networks • Lead data classification, encryption, tokenization, key management, DLP, and privacy-by-design controls for PHI and ePHI • Design guardrails, data protection, abuse controls, misuse controls, and monitoring for AI, machine learning, and generative AI systems • Tune SIEM and cloud-native detections, drive event correlation and incident response, perform vulnerability scanning, and coordinate penetration testing • Turn security findings into fixes with real remediation timelines • Maintain security baselines, configuration compliance, controls, logging, and audit evidence • Coach engineers across teams and make secure practices the default • Perform other duties as assigned

🎯 Requirements

• Bachelor’s degree in Computer Science or a related field • 6 to 9 years of security engineering experience with hands-on cloud experience, stated as a guideline rather than a hard requirement • Agentic AI tools as a primary surface for security engineering, analysis, detection, and automation • Senior-level breadth across network security, application security, cloud security, information security, and AI security, with depth in several areas • Production experience building and operating controls as code, including policy as code, infrastructure as code, automation, and detections • Experience carrying on-call and incident load • Cloud security expertise in AWS and Azure, including IAM, least privilege, identity federation, SSO, secrets management, privileged access, workload and non-human identities, network security, container security, image scanning, runtime protection, key management, encryption, CSPM, CWPP, and CIEM • Data protection and privacy engineering experience, including data classification, encryption, tokenization, key management, DLP, privacy by design for regulated health data, and data residency awareness • Application and product security experience, including secure SDLC, threat modeling, static analysis, dynamic analysis, software composition analysis, secrets security, software supply chain security, and API security • Detection, response, and vulnerability management experience, including SIEM, cloud-native detection, log and event correlation, vulnerability scanning and management, penetration testing coordination, and remediation to closure • AI security awareness covering prompt injection, data and model poisoning, and data leakage • Familiarity with OWASP Top 10 for LLM Applications and MITRE ATLAS is a plus • Experience with HIPAA, HITRUST, SOC 2, NIST, ISO 27001, ISO 42001, and GDPR frameworks • Ability to multitask and work autonomously • Excellent organizational and project management skills • Effective interpersonal and communication skills

🏖️ Benefits

• Paid Time Off (PTO) • Medical insurance • Dental insurance • Vision insurance • 401(k) with match • Robust EAP • Wellness program