Senior Security Engineer

Job not on LinkedIn

🔥 2 minutes ago

☕ Washington – Remote

infoinfo

💵 $163k - $192k / year

⏰ Full Time

🟠 Senior

👮‍♂️ Cybersecurity / Security Engineer

Where this job comes from

Posted on Opala's careers page, not through a job board

First seen by Remote Rocketship 2 minutes ago

Logo of Opala

Opala

11 - 50 employees

🏥 Healthcare

⚕️ Healthcare Insurance

☁️ SaaS

Healthcare • Healthcare Insurance • SaaS

Opala is a company that specializes in providing software solutions for the healthcare industry, focusing primarily on healthcare payers such as health plans and pharmacy benefit managers. The company aims to transform data into a competitive advantage by improving data quality and providing insights to enhance revenue growth, decrease expenses, and improve patient outcomes. Opala's solutions streamline workflows, enhance administrative efficiency, and identify care gaps. With a strong focus on data security and reliability, Opala offers scalable and automated solutions tailored for healthcare providers. Additionally, they provide APIs through their Developer Toolkit for seamless integration with third-party applications, helping healthcare organizations achieve better patient matching and real-time benefits tracking.

📋 Description

• Own the day-to-day operation of Opala's cloud security controls across Azure and AWS • Operate cloud security posture management and vulnerability remediation • Triage findings, assign owners, follow up with engineering teams, and report status to leadership • Confirm security testing for changes, including SAST, DAST, dependency scanning, and vulnerability scanning • Recommend and implement missing security tooling in CI/CD pipelines using GitHub Actions • Implement software supply chain protections • Design and implement Infrastructure as Code guardrails with Platform and Data teams • Secure and ensure compliance for features and data platform changes, including Databricks • Integrate logging and monitoring with Arctic Wolf MDR/SOC vendor • Tune alerting and investigate security incidents, documenting root cause and remediation • Automate evidence collection for compliance controls in Drata • Support the annual audit cycle • Coordinate third-party penetration testing and remediation • Research security enhancements and advise leadership on emerging risks • Report to the Director of Security & Compliance and collaborate with Platform and Data teams • Take ownership of cloud posture findings and production-gating security testing during the first 90 days

🎯 Requirements

• 5+ years in cloud security, DevSecOps, or platform engineering roles • Experience securing both AWS and Azure • Working knowledge of Microsoft Entra ID, AWS IAM, Microsoft Defender for Cloud, and AWS Security Hub • Solid experience with Infrastructure as Code, such as Terraform • Scripting for automation • Experience with SAST/DAST, software supply chain security, and API security • Ability to collaborate closely with developers and product squads while setting security best practices • Security and cloud certifications such as AWS Certified Security - Specialty, AWS Certified Solutions Architect - Professional, Azure AZ-500, and Azure AZ-305 (preferred) • Experience using or administering compliance automation tools such as Drata or similar GRC platforms • Experience working with managed security (MDR/SOC) providers • Experience with immutable infrastructure practices • Experience in regulated industries such as healthcare or fintech • Additional scripting languages such as PowerShell or Python • Exposure to enterprise architecture frameworks such as TOGAF • Indefinite authorization to work in the US on a full-time basis for any employer

🏖️ Benefits

• Medical, dental, vision, life and AD&D insurance • Employee Assistance Program (EAP) • Short-term and long-term disability • 16 days PTO • 8 paid holidays • Fully paid holiday closure • Parental and family medical leave • 401(k) • Stock options • Annual bonuses • Salary increases based on merit

Apply Now

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Similar Jobs

🔥 58 minutes ago

Pondurance

51 - 200

💼 Consulting

🏥 Healthcare

🛡️ Insurance

Senior PCI DSS QSA consultant leading compliance assessments for Pondurance, a cybersecurity resilience firm. Advising clients on controls, remediation, and regulatory frameworks.

🔥 1 hour ago

Nature's Way

501 - 1000

🏥 Healthcare

🍽️ Food & Beverage

🧘 Wellness

Cybersecurity Manager leading Nature’s Way’s enterprise security operations, risk, compliance, and Microsoft security capabilities. Improving incident response and protecting a holistic health products business.

🔥 1 hour ago

Cyclotron, Inc.

51 - 200

💼 Consulting

🏥 Healthcare

📦 Logistics

Security Architect designing Microsoft Defender XDR and Sentinel deployments for Cyclotron’s enterprise clients. Improving cloud, endpoint, network, and Microsoft asset security across on-premises and cloud environments.

🔥 1 hour ago

Cyclotron, Inc.

51 - 200

💼 Consulting

🏥 Healthcare

📦 Logistics

Threat Protection Security Engineer deploying Microsoft Defender XDR and Sentinel for enterprise clients. Designing and implementing cloud and on-premises security solutions at Cyclotron, a Microsoft Solutions Partner.

🔥 4 hours ago

Liftoff Mobile

501 - 1000

📣 Marketing

Senior Offensive Security Engineer protecting Liftoff’s AI-powered mobile app marketing platform. Leading penetration testing, continuous AI-assisted security testing, remediation, and incident-response improvements.

Developed by Lior Neu-ner. I'd love to hear your feedback — Get in touch via DM or support@remoterocketship.com
Follow Remote Rocketship on LinkedInFollow Remote Rocketship on InstagramFollow Remote Rocketship on FacebookFollow Remote Rocketship on TikTok