Cloud Security Engineer

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Staff Cloud Security Engineer based in the United States. This is a remote opportunity for a growing digital health technology organization.

• Architect, implement, and continuously improve security across AWS infrastructure, including IAM, VPC networking, KMS, CloudTrail, GuardDuty, Security Hub, AWS Config, and WAF
• Secure serverless services, databases, storage, and containerized workloads through encryption, network isolation, least-privilege access, reliable backups, and comprehensive audit logging
• Establish security guardrails and policy-as-code for infrastructure provisioning
• Manage secrets, encryption keys, and certificates, and harden Amazon EKS clusters
• Secure application architecture and APIs by implementing strong authentication and authorization, session management, rate limiting, input validation, and protections against OWASP Top 10 and API security risks
• Integrate threat modeling, secure design reviews, static and dynamic application security testing, dependency scanning, container scanning, and CI/CD security controls into the software development lifecycle
• Protect proprietary video and communication systems, including WebRTC and media transport, session access controls, recording storage, and encryption
• Develop organization-wide AI usage policies and governance frameworks
• Protect AI/ML applications against vulnerabilities such as prompt injection, insecure output handling, and data poisoning
• Define and enforce security controls for models, artifacts, APIs, supply chain dependencies, and access permissions
• Implement continuous monitoring, telemetry, and audit logging across AI/ML workflows
• Lead the organization's SOC 2 Type I and Type II compliance efforts
• Own HIPAA Security Rule compliance, including risk assessments, policies, business associate agreements (BAAs), breach notification procedures, and audit preparation
• Optimize the use of compliance automation platforms such as Vanta
• Partner with outsourced IT providers to secure employee laptops and workstations through device management, encryption, endpoint detection and response (EDR), patching, and security baselines
• Own identity and access management, including SSO, MFA, role-based access control, employee lifecycle processes, and periodic access reviews
• Collaborate with People Operations to deliver security awareness and HIPAA training
• Establish logging, monitoring, and alerting capabilities across cloud, application, and corporate environments
• Develop, maintain, and test incident response procedures, lead security incident response, and conduct tabletop exercises
• Partner with engineering to strengthen disaster recovery, backup integrity, and business continuity planning
• Define the security roadmap, prioritize initiatives according to risk and business impact, and communicate security posture to the CTO and executive leadership
• Mentor engineers, promote security champions, build a security-conscious culture

• At least 8 years of experience in security engineering, including substantial hands-on responsibility for securing production cloud environments, preferably with a strong AWS focus
• Deep knowledge of AWS security architecture, including IAM, network security, encryption and KMS, logging and threat detection services, serverless security