Senior Platform Security Engineer - Remote

Overview

As a Senior Platform Security Engineer at Imagine Pediatrics, you will be instrumental in designing, implementing, and maintaining robust security controls across our cloud infrastructure, ensuring our continual delivery of a seamless, reliable, and scalable care platform.

In Short

• Design and enforce security controls aligned to HIPAA, HITRUST, SOC 2, NIST
• Implement IAM best practices, encryption strategies (KMS, TLS), and zero-trust access
• Own secrets management, access control policies, and container hardening
• Ingest and monitor security-relevant logs in a SIEM (host, network, endpoint, cloud)
• Create and test incident response procedures and threat detection alerts
• Monitor threat intelligence feeds and evaluate exposure to new vulnerabilities
• Conduct internal risk assessments and third-party vendor security reviews
• Automate evidence collection and control mapping for audits
• Collaborate on endpoint security and tooling (Entra, JAMF, Zscaler, Intune)
• Help develop internal security policies and training materials

Requirements

• 6–10+ years in cloud security, DevSecOps, or platform security engineering
• Hands-on experience with compliance (HIPAA, HITRUST, SOC 2)
• Strong AWS security knowledge (IAM, GuardDuty, Config, CloudTrail, etc.)
• SIEM configuration and tuning experience (e.g. Splunk, Datadog, Panther)
• Comfortable with Linux hardening and container security (ECS/EKS)
• Proficient in scripting and automation (Python or Go)
• Background in healthcare or other regulated industries is a major plus

Benefits

• Competitive medical, dental, and vision insurance
• Healthcare and Dependent Care FSA; Company-funded HSA
• 401(k) with 4% match, vested 100% from day one
• Employer-paid short and long-term disability
• Life insurance at 1x annual salary
• 20 days PTO + 10 Company Holidays & 2 Floating Holidays
• Paid new parent leave
• Additional benefits to be detailed in offer