-
Design, implement, and maintain secure architectures across AWS, Azure, and GCP, including infrastructure-as-code and policy-as-code security controls.
-
Deploy and manage cloud security capabilities such as Security Hub, GuardDuty, Macie, Inspector, Config, Azure Defender for Cloud, and native IAM controls.
-
Operate CSPM/CNAPP platforms to identify cloud misconfigurations, exposed data stores, toxic combinations, and other security risks.
-
Secure containerized and serverless environments, including EKS, ECS, Lambda, image scanning, admission controls, runtime protection, and least-privilege access.
-
Establish strong network segmentation, encryption, centralized key management, secrets management, and secure workload configurations.
-
Partner with AI and data teams to secure model development, training, fine-tuning, inference, and retrieval-augmented generation pipelines handling sensitive data.
-
Apply AI security frameworks and threat-modeling practices to address prompt injection, data poisoning, model exfiltration, insecure outputs, excessive agency, and other AI-specific threats.
-
Implement AI gateways, guardrails, content filtering, validation, rate limiting, and logging controls while supporting responsible enterprise use of generative AI.
-
Evaluate third-party and foundation-model providers, including security controls, data residency, retention, contractual protections, and appropriate coverage for sensitive healthcare data.
-
Secure the machine-learning supply chain through artifact provenance, signed models, dependency scanning, and hardened MLOps environments.
-
Embed security into CI/CD pipelines through SAST, DAST, SCA, secrets scanning, infrastructure-as-code scanning, threat modeling, and secure design reviews.
-
Protect APIs and machine-to-machine integrations using secure authorization standards such as OAuth 2.0, OIDC, mTLS, and scoped service tokens.
-
Manage software supply-chain security, including SBOMs, dependency governance, artifact signing, penetration testing, vulnerability remediation, and bug-bounty processes.
-
Strengthen PHI and PII protection through data classification, tokenization, de-identification, DLP, and appropriate access controls.
-
Manage endpoint and identity security using EDR/XDR, Microsoft Entra ID, Conditional Access, privileged identity management, phishing-resistant MFA, and risk-based authentication.
-
Govern service accounts, workload identities, service principals, AI agent credentials, and other non-human identities through least privilege and short-lived credentials.
-
Monitor and investigate security alerts, coordinate incident response, and work with SOC and managed detection and response partners.
-
Develop SIEM detection content, detection-as-code, log coverage, MITRE ATT&CK mappings, SOAR workflows, and automated response capabilities using Python and PowerShell.
-
Develop incident response runbooks and forensic procedures covering both conventional cyber incidents and AI-specific scenarios such as model misuse, prompt-based data leakage, and compromised AI integrations.
-
Participate in tabletop exercises, purple-team activities, post-incident reviews, and continuous security improvement initiatives.
-
Support HIPAA, HITRUST, SOC 2 Type 2, and NIST-related audits, customer security assessments, evidence collection, risk registers, asset inventories, and remediation tracking.
-
Conduct third-party and vendor risk reviews, with particular attention to AI subprocessors, sensitive-data flows, and emerging technology risks.
-
Partner with compliance and other stakeholders to maintain alignment between technical controls, security policies, regulatory requirements, and responsible AI practices.
-
Contribute to security awareness and training initiatives, including guidance on secure and responsible AI use.
Requirements
-
Bachelor’s degree in Computer Science, Information Security, or a related field, or equivalent professional experience.
-
5+ years of experience in security engineering or comparable technical security roles.
-
Strong knowledge of cloud-native security across AWS, Azure, and GCP, along with modern SaaS architectures.
-
Hands-on experience with SIEM, EDR/XDR, IAM, vulnerability management, security automation, and incident response technologies.
-
Practical experience securing containerized and serverless workloads such as EKS and Lambda.
-
Familiarity with healthcare and security frameworks including HIPAA, HITRUST, NIST, and SOC 2.
-
Experience with infrastructure-as-code security using technologies such as Terraform, Ansible, or CloudFormation is preferred.
-
Experience integrating security into DevSecOps environments and CI/CD pipelines, including tools such as Jenkins or Bitbucket, is preferred.
-
Strong scripting capabilities in Python, PowerShell, Bash, or similar languages.
-
Experience with AI/LLM security, AI threat modeling, ML security, or securing AI-enabled applications is highly valuable.
-
Certifications such as CISSP, CISM, CCSP, AWS Security Specialty, GSEC, GCIA, or GCIH are preferred.
-
Strong analytical, troubleshooting, and problem-solving capabilities with exceptional attention to detail.
-
Ability to balance business objectives with appropriate risk mitigation and practical security controls.
-
Excellent written and verbal communication skills, including the ability to explain complex technical and security concepts to non-technical stakeholders.
-
Collaborative and proactive approach, with a demonstrated commitment to continuous improvement.
-
Ability to operate effectively in a regulated healthcare technology environment and manage sensitive information responsibly.
Benefits
-
Annual salary range of $140,000–$160,000, with compensation varying according to geographic market, job-related knowledge, skills, and experience.
-
Remote work opportunity within the United States.
-
Medical, dental, and vision insurance benefits.
-
401(k) matching.
-
Generous paid time off program.
-
Opportunity to work on advanced cloud, cybersecurity, healthcare, and AI security challenges.
-
Environment focused on continuous professional and technical development.
-
Equal opportunity workplace committed to an inclusive and respectful work environment.