Senior Information Security Engineer

Job not on LinkedIn

🔥 2 minutes ago

🇺🇸 United States – Remote

💵 $140k - $160k / year

⏰ Full Time

🟠 Senior

👮‍♂️ Cybersecurity / Security Engineer

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

👻 Ghost score 1%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Reveleer

WebsiteLinkedInAll Job Openings

51 - 200 employees

🏥 Healthcare

⚕️ Healthcare Insurance

☁️ SaaS

Healthcare • Healthcare Insurance • SaaS

Reveleer is a healthcare technology company that specializes in providing an end-to-end platform for value-based care. Their platform leverages artificial intelligence to automate tasks, improve efficiency, and enhance patient care by consolidating risk adjustment and quality improvement workflows. Reveleer helps healthcare organizations streamline their operations through intelligent data acquisition, enhancing productivity and ensuring accurate reimbursement. With a focus on healthcare intelligence, Reveleer integrates with HIEs and EHR systems to improve care delivery and capture relevant diagnoses. They have a significant presence in the healthcare industry, working with various health plans to maximize their performance and patient outcomes.

📋 Description

• Safeguard Reveleer’s cloud-based healthcare SaaS platforms, AI/ML systems, infrastructure, and customer data • Design and maintain secure architectures across AWS, Azure, and GCP • Implement infrastructure-as-code and policy-as-code security controls • Operate CSPM/CNAPP tooling to detect misconfigurations, toxic combinations, and exposed PHI data stores • Secure containerized and serverless workloads across EKS, ECS, and Lambda • Enforce network segmentation, encryption standards, and centralized key and secrets management • Partner with Data Science and AI Engineering to secure model development, training, fine-tuning, inference, and RAG pipelines handling PHI and PII • Threat model AI features and address prompt injection, insecure output handling, training data poisoning, exfiltration, and excessive agency • Implement AI gateways, guardrails, content filtering, validation, rate limiting, and audit logging • Govern third-party and foundation model usage, including vendor reviews, data residency, retention, zero-retention, no-training, and BAA controls • Establish controls against shadow AI and secure the ML supply chain • Contribute to AI governance with Compliance and Legal • Embed security into CI/CD pipelines using SAST, DAST, SCA, secrets scanning, and IaC scanning • Perform threat modeling, secure design reviews, and code reviews for microservices, APIs, and AI-enabled features • Secure API and machine-to-machine authorization patterns • Manage software supply chain risk through SBOM generation, dependency governance, and artifact signing • Drive penetration testing, bug bounty intake, and remediation validation • Protect PHI and PII through classification, tokenization, de-identification, and DLP • Manage and tune EDR/XDR platforms and develop detection engineering and response automation • Implement identity security through Microsoft Entra ID, Conditional Access, PIM, and risk-based authentication • Govern non-human identities, service principals, workload identities, and AI agent credentials • Support Intune and MDM compliance baselines across Windows, macOS, iOS, and Android • Operate SaaS security posture management for third-party integrations and OAuth grant risk • Monitor and triage alerts, investigate incidents, and coordinate response with SOC and MDR partners • Build and maintain SIEM detection content, detection-as-code, log pipeline coverage, and MITRE ATT&CK mapping • Develop incident response runbooks, playbooks, and forensic procedures, including AI-specific scenarios • Automate response and enrichment through SOAR workflows, Python, and PowerShell • Participate in tabletop exercises, purple team activity, and post-incident reviews • Support audits and evidence collection for HIPAA, HITRUST, SOC 2 Type 2, NIST 800-53, and customer security assessments • Maintain asset and AI system inventories, risk registers, and remediation tracking • Conduct vendor and third-party risk reviews, especially for AI subprocessors and data flows • Partner with Compliance to align technical controls, policies, and standards • Contribute to security awareness and training, including responsible AI use guidance

🎯 Requirements

• Bachelor’s degree in Computer Science, Information Security, or equivalent experience • 5+ years of experience in security engineering or related technical security roles • Strong knowledge of cloud-native security across AWS, Azure, and GCP • Hands-on experience with SIEM, EDR/XDR, IAM, vulnerability management, and security automation • Familiarity with HIPAA, HITRUST, NIST, and SOC 2 requirements • Experience securing containerized and serverless workloads, such as EKS and Lambda • Preferred: CISSP, CISM, CCSP, AWS Security Specialty, or GIAC certifications • Preferred: Terraform, Ansible, or CloudFormation experience for infrastructure-as-code security • Preferred: DevSecOps pipeline and tools experience, such as Jenkins and Bitbucket • Preferred: Strong scripting skills in Python, PowerShell, or Bash • Analytical and detail-oriented with strong problem-solving skills • Ability to balance business needs with risk mitigation • Excellent communication skills for translating complex technical topics to non-technical stakeholders • Collaborative and proactive approach to continuous improvement • Must complete Reveleer’s E-Verify process as a new hire

🏖️ Benefits

• Competitive salary • Medical, Dental and Vision benefits • 401k match • Generous PTO plan