Senior Information Security Engineer - Remote

Overview

The Senior Information Security Engineer plays a key role in safeguarding the company’s cloud-based healthcare SaaS platforms, infrastructure, and customer data.

In Short

• Design and maintain secure architectures across AWS, Azure, and GCP environments.
• Implement guardrails and controls using services such as AWS Security Hub, GuardDuty, Config, and IAM.
• Conduct regular vulnerability scans, configuration reviews, and remediation tracking.
• Collaborate with DevOps and Engineering to integrate security into CI/CD pipelines.
• Manage and enhance EDR/XDR solutions.
• Monitor alerts, investigate incidents, and coordinate responses with the SOC.
• Support audits and evidence collection for HIPAA, HITRUST, and SOC 2.
• Maintain asset inventories, risk registers, and remediation tracking.
• Contribute to security awareness and training initiatives.
• Strong knowledge of cloud-native security and modern SaaS architectures.

Requirements

• Bachelor’s degree in Computer Science, Information Security, or equivalent experience.
• 5+ years of experience in security engineering or related technical security roles.
• Hands-on experience with SIEM, EDR/XDR, IAM, vulnerability management, and security automation.
• Familiarity with HIPAA, HITRUST, and SOC 2 requirements.
• Experience securing containerized and serverless workloads.
• Certifications such as CISSP, CISM, or AWS Security Specialty preferred.
• Experience with Terraform, Ansible, or CloudFormation for infrastructure-as-code security preferred.
• Strong scripting skills (Python, PowerShell, or Bash) preferred.
• Excellent communication skills.
• Collaborative team player with a proactive approach.

Benefits

• Competitive salary based on market location and experience.
• Remote work opportunity.
• Equal opportunity employer.
• Comprehensive benefits package.
• Support for continuous learning and development.