Senior Security Engineer

🔥 3 hours ago

🇺🇸 United States – Remote

⏰ Full Time

🟠 Senior

👮‍♂️ Cybersecurity / Security Engineer

👻 Ghost score 25%

What it means: the chance that no one is really hiring for this job.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Rezilient Health

WebsiteLinkedInAll Job Openings

51 - 200 employees

🏥 Healthcare

⚕️ Healthcare Insurance

☁️ SaaS

Healthcare • Healthcare Insurance • SaaS

Rezilient Health is a healthcare company offering a primary and multi-specialty care benefit designed to be both comprehensive and cost-effective for businesses and their employees. It provides integrated healthcare services through its CloudClinics, virtual care, and connected digital devices, allowing employees to access high-quality healthcare efficiently and affordably. The company emphasizes preventative care and sustainable health outcomes while reducing reliance on emergency and urgent care services, thereby lowering overall healthcare costs for businesses. Rezilient Health's innovative approach includes same-day in-clinic and virtual appointments, along with 24/7 messaging access to healthcare providers.

📋 Description

• Design, implement, and maintain security controls across Rezilient’s cloud infrastructure, including network security, encryption, secrets management, logging, and configuration hardening. • Build and manage security guardrails using infrastructure as code, cloud-native security tools, and automated policy enforcement. • Continuously assess cloud environments for misconfigurations, excessive permissions, and exposure risks, and drive remediation with Engineering. • Ensure PHI and PII are protected at rest and in transit, with appropriate data classification, access restrictions, and retention controls. • Partner with Product and Engineering to embed security into the software development lifecycle, from design through release. • Lead threat modeling and security design reviews for new features, integrations, infrastructure, and architecture decisions. • Own application security tooling and processes, including static and dynamic analysis, dependency and container scanning, and secure code review. • Establish secure development standards and coach engineers on secure coding practices and common vulnerability classes. • Assess the security of third-party integrations, APIs, and EHR and partner data exchanges that handle patient data. • Partner with IT to design and enforce identity and access management controls, including SSO, MFA, role-based access, least privilege, and access reviews. • Build and tune security monitoring, logging, and alerting to detect suspicious activity across cloud, application, identity, and endpoint layers. • Serve as a technical lead during security incidents, coordinating investigation, containment, eradication, recovery, and post-incident review. • Develop and maintain incident response runbooks and lead tabletop exercises with cross-functional teams. • Own the vulnerability management program, including scanning, prioritization, remediation tracking, and coordination of penetration tests. • Monitor the threat landscape relevant to healthcare and cloud environments and proactively adapt defenses. • Produce evidence for technical controls for SOC 2, HIPAA/HITECH, HITRUST, and related frameworks. • Support audits, risk assessments, and remediation efforts with technical expertise, documentation, and control testing. • Contribute to security policies, standards, and procedures, ensuring they are technically sound and practical to operate. • Act as a trusted security advisor to Engineering, Product, IT, and leadership, translating technical risk into clear business impact and recommendations. • Automate security processes and reduce manual work through scripting, tooling, and integration. • Contribute to security awareness efforts with practical, role-specific guidance for engineers and staff. • Help shape the long-term information security roadmap and mentor team members as the security function grows.

🎯 Requirements

• Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, or a related field, or equivalent practical experience. • 5+ years of experience in information security, security engineering, or a closely related technical role, ideally in healthcare, digital health, or SaaS/cloud environments. • Deep hands-on experience securing AWS cloud environments, including IAM, networking, encryption, logging, and cloud-native security services. • Strong background in application security, including threat modeling, secure code review, and security testing tools within CI/CD pipelines. • Experience with identity and access management, endpoint security, and security monitoring or SIEM tools. • Proven experience leading or supporting incident response and vulnerability management programs. • Working knowledge of security and compliance frameworks such as SOC 2, HIPAA/HITECH, HITRUST, ISO 27001/27002, or NIST CSF, and experience providing technical evidence for audits. • Proficiency in scripting or programming (e.g., Python, Go, or Bash) and experience with infrastructure as code (e.g., Terraform). • Excellent communication skills, with the ability to explain technical risks to both technical and non-technical audiences. • Comfort operating as a senior individual contributor in a fast-moving startup environment with broad ownership. • Experience protecting PHI or other regulated data is strongly preferred. • Relevant certifications such as CISSP, CCSP, OSCP, GIAC (e.g., GCIH, GCLD, GWAPT), or cloud security certifications are a plus.

🏖️ Benefits

• Meaningful ownership through stock options, allowing you to share directly in the value you help create as we grow • Competitive base compensation • Comprehensive medical, dental, and vision coverage options, with Rezilient contributing toward your premiums • Complimentary access to Rezilient's clinical programs for you and your household members, the same connected care we deliver to our patients • 401(k) retirement plan to support your long-term financial well-being • Flexible Paid Time Off, so you can recharge without counting days • Dedicated Paid Sick Leave, separate from your FTO, for when health needs come first • 11 paid company holidays each year • Paid family leave to support you through life's biggest moments • Optional ancillary benefits, including life insurance, disability coverage, and a Health Savings Account (HSA)

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume