Lead Security Engineer

Job Summary

Owning the security and compliance program, the full-time Lead Security Engineer will manage HIPAA, SOC 2 compliance, and vendor risk management while conducting security assessments and threat modeling in a remote environment.

Key responsibilities

• Oversee end-to-end security and compliance posture, including audit cycles and vendor risk management
• Conduct regular security assessments and build a prioritized remediation roadmap for infrastructure security
• Establish security policies and incident response procedures while developing automation tools for compliance processes

Required qualifications

• 6+ years in software or infrastructure engineering, with 2+ years focused on security and managing a compliance program
• Deep experience with SOC 2 audits, ideally having managed them end-to-end as the accountable owner
• Hands-on knowledge of AWS security, including IAM and S3 policies
• Ability to build tooling and automation, with experience in coding and scripting against APIs
• Practical experience using AI tools in engineering or security workflows, with a critical understanding of AI security risks