Lead, Cybersecurity

🔥 1 hour ago

🇺🇸 United States – Remote

💵 $150k / year

⏰ Full Time

🟠 Senior

👮‍♂️ Cybersecurity / Security Engineer

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

👻 Ghost score 0%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Smartlinx

WebsiteLinkedInAll Job Openings

51 - 200 employees

Founded 2000

🏥 Healthcare

💼 Consulting

📦 Logistics

💰 Private equity on 2020-04

Healthcare • Consulting • Logistics

Smartlinx is a SaaS workforce management and HR platform purpose-built for senior care providers and healthcare staffing organizations. It delivers scheduling, time & attendance, payroll, PBJ/CMS compliance reporting, workforce analytics, unified HR (recruiting, onboarding, benefits), contingent staff and vendor management, and mobile employee tools to optimize labor, maintain regulatory compliance, and improve staff engagement and retention.

📋 Description

• Define and operate Smartlinx's cybersecurity program across multi-tenant SaaS products, cloud infrastructure, corporate technology, data platforms, integrations, and third-party services • Own SaaS product and application security, cloud and infrastructure security, identity and access management, vulnerability management, security monitoring, incident response, third-party risk, and SOC 2 Type II readiness • Lead threat modeling, security architecture reviews, abuse-case analysis, risk assessments, secure coding guidance, automated security testing, penetration testing, and remediation • Establish secure cloud baselines and govern network security, secrets, certificates, encryption, privileged credentials, patching, endpoint protection, vulnerability scanning, and configuration management • Review security of databases, data platforms, data exchanges, backups, and disaster-recovery environments • Lead SOC 2 Type II readiness, control design, evidence collection, auditor coordination, remediation, management responses, and annual attestation • Maintain security policies, standards, procedures, risk register, evidence repository, exception records, remediation plans, and executive compliance reporting • Apply HIPAA and HITECH requirements and support customer contractual security obligations • Establish unified vulnerability-management and third-party security programs • Define security monitoring, detection use cases, incident-response plans, escalation paths, investigations, containment, recovery, forensics, and post-incident reviews • Conduct tabletop exercises and drive corrective actions to closure • Establish identity-first security with least privilege, multifactor authentication, privileged access management, conditional access, and access certification • Govern data classification, access, encryption, masking, retention, deletion, secure disposal, and data-loss prevention • Develop cybersecurity strategy, operating plan, budget, staffing model, roadmap, executive and Board reporting, and security scorecard • Select and manage security tools, deliver security education, and recruit, coach, and develop security personnel

🎯 Requirements

• Bachelor's degree in Cybersecurity, Computer Science, Engineering, Information Systems, or a related field, or equivalent practical experience • 8+ years of progressive experience across product, application, cloud, infrastructure, or security-operations disciplines • 3+ years in a lead, principal, architect, or security-program ownership role • Experience securing multi-tenant B2B SaaS products in healthcare, payroll, HR technology, or another regulated environment • Experience protecting PHI, PII, financial, or other sensitive data • Hands-on experience leading at least one successful SOC 2 Type II audit cycle • Strong Microsoft Azure security experience across cloud networking, identity, compute, storage, databases, containers, Kubernetes, infrastructure as code, secrets, logging, monitoring, backup, and recovery • Deep knowledge of secure software development, threat modeling, web, mobile, and API security, authentication, authorization, tenant isolation, OWASP risks, and DevSecOps practices • Hands-on experience with SAST, DAST, SCA, SBOM, secrets scanning, SIEM, EDR, DLP, WAF, CSPM, vulnerability scanning, penetration testing, and related security capabilities • Experience managing vulnerabilities, security findings, and incidents through risk assessment, containment or remediation, retesting, exception management, post-incident review, and executive reporting • Knowledge of SOC 2 Trust Services Criteria, NIST Cybersecurity Framework, CIS Controls, ISO 27001, and HITRUST • Ability to make risk-based decisions, balance security with product delivery, influence cross-functional stakeholders, and explain technical risks clearly • Relevant certifications such as CISSP, CCSP, CISM, CISA, CSSLP, OSCP, GIAC, HITRUST CCSFP, or Microsoft Azure Security Engineer are preferred • Experience with Entra ID, Defender, Sentinel, Azure DevOps, Snowflake, or Microsoft Fabric is preferred

🏖️ Benefits

• 10% bonus eligible • Remote work environment • Medical insurance • Dental insurance • Vision insurance • FSA • HSA • Life insurance • Pet insurance • 401(k) • Professional development and skills growth opportunities • Occasional travel up to 15%