Cloud Security Engineer

🔥 0 minutes ago

🔔 Pennsylvania – Remote

🔔 Pennsylvania – Remote

💵 $110k - $150k / year

⏰ Full Time

🟡 Mid-level

🟠 Senior

👮‍♂️ Cybersecurity / Security Engineer

👻 Ghost score 0%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

TherapyNotes, LLC

WebsiteLinkedInAll Job Openings

51 - 200 employees

Founded 2010

💼 Consulting

⚖️ Legal

🏥 Healthcare

Consulting • Legal • Healthcare

TherapyNotes, LLC is a comprehensive practice management system designed specifically for behavioral health professionals, including psychologists, therapists, psychiatrists, and social workers. The platform offers an array of features such as scheduling, telehealth, electronic health records (EHR), billing, and a client portal, all integrated into a secure and user-friendly software solution. TherapyNotes aims to streamline clinical workflows, enhance patient care, and reduce administrative burdens for mental health practices, supporting them with dedicated customer service and continuous innovation based on user feedback.

📋 Description

• Secure and manage cloud infrastructure and cloud-based applications, with a focus on Azure • Secure containerized workloads and Kubernetes environments, including network policy, workload identity, runtime protection, and container image scanning • Own and mature cloud security posture management (CSPM), continuously identifying and remediating cloud misconfigurations • Secure infrastructure-as-code orchestration platforms and Terraform/OpenTofu pipelines through access control, secrets management, and deployment approval workflows • Manage identities in Microsoft Entra ID through Conditional Access, Entitlement Management, and just-in-time (JIT) privileged access models • Review network diagrams and proposed connectivity changes; advise on segmentation and sensitive data flows with IT and SRE teams • Administer Zero Trust network access and edge security tooling for corporate and cloud resources • Manage broader security solutions including SIEM, DLP, E/XDR, and vulnerability management • Monitor alerts, respond to and escalate incidents, and participate in the incident response on-call rotation • Conduct threat analysis, vulnerability assessments, and risk evaluations; document findings, manage mitigation, and report status to leadership • Develop queries, scripts, integrations, and automated workflows to improve cloud security operations • Collaborate with development teams to integrate security into the SDLC and CI/CD pipeline • Conduct periodic cloud configuration and access reviews for compliance • Participate in audits and assessments supporting GRC efforts • Contribute to a collaborative security team in a healthcare-regulated environment involving HIPAA, HITRUST, and HITECH

🎯 Requirements

• Bachelor's degree in information security, computer science, or related field preferred; equivalent experience considered • 5+ years of experience in cloud security engineering or related role • Deep, hands-on experience securing cloud infrastructure and cloud-based applications (Azure preferred, AWS a plus) • Hands-on network security experience and a strong understanding of network architecture, connectivity, segmentation, and firewall controls • Experience securing containerized workloads and Kubernetes environments (e.g., AKS), including network policy, workload identity, and runtime protection • Experience with cloud security posture management (CSPM) and remediating misconfigurations across cloud environments • Experience securing IaC orchestration platforms, including access control, secrets management, and deployment approval workflows (e.g., Terraform, OpenTofu) • Experience with Microsoft Entra ID, including Conditional Access, Entitlement Management, and just-in-time (JIT) privileged access models • Experience with Zero Trust / SASE tooling (e.g., Cloudflare Zero Trust, WAF, Gateway, or equivalent) • Knowledge of security frameworks (NIST, ISO 27001, CIS) and compliance frameworks (HITRUST, PCI DSS) • Proven ability to conduct security assessments, vulnerability management, and incident response • Strong understanding of OS platforms (Windows, Linux) and endpoint security • Industry certifications such as CISSP, SSCP, Security+, or a cloud security certification (Azure/AWS) preferred • Familiarity with GitOps tooling (Argo, Flux) for secure deployment in Kubernetes environments • Network or Systems Engineering background a huge plus • Familiarity with programming/scripting languages a plus

🏖️ Benefits

• Employer sponsored health, dental, vision, life, and disability insurance • Retirement plan with company contribution • Annual company profit sharing • Personal development/training budget • Open, collaborative work environment • Extensive 2-week onboarding plan • Comprehensive mentorship program