Staff Cloud Security Engineer - Remote

Overview

The Staff Cloud Security Engineer is a critical, hands-on technical role responsible for engineering, implementing, and automating robust security controls within our cloud environments (AWS primarily, with GCP considerations). This role is pivotal in maturing our cloud security posture, securing Included Health's product infrastructure, and directly contributing to the prevention of unauthorized PHI exfiltration.

In Short

• Design, develop, and implement a comprehensive authorization framework for cloud resources.
• Lead the technical implementation of Just-In-Time access control systems for production environments.
• Collaborate with engineering to integrate data classification with access control mechanisms.
• Develop and maintain security automation scripts in Python or Go.
• Implement Infrastructure as Code principles using Terraform.
• Contribute to the design and implementation of centralized security controls.
• Partner with engineering teams to establish secure practices for managing the development toolchain.
• Drive the remediation of legacy cloud environments.
• Support organizational change management efforts related to new security controls.
• Conduct security assessments and contribute to incident response.

Requirements

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field.
• 5+ years of experience in cloud security, particularly in AWS.
• Proven hands-on software development experience in Python and Go.
• Experience designing and implementing authorization and access control frameworks.
• Deep proficiency in writing and maintaining Terraform modules for security.
• Experience with containerization, including hardening containerized environments.
• Experience with SDLC security and CI/CD pipeline security integration.
• Experience with security logging and monitoring tools.
• Familiarity with cloud security frameworks and regulations.

Benefits

• Opportunity to work in a critical technical role.
• Contribute to maturing cloud security posture.
• Work remotely.
• Collaborate with diverse engineering teams.
• Drive a culture of security by design.
• Engage in continuous learning and professional development.
• Impact the security of sensitive data handling.
• Work on innovative security solutions.
• Participate in organizational change management.
• Be part of a mission-driven organization.