Security Engineer

Job Summary

Seeking a hands-on Security Engineer, the full-time remote position will manage AWS cloud security, integrate automated security into CI/CD pipelines, and ensure compliance with SOC 2 and healthcare standards while collaborating with software engineers throughout the development lifecycle.

Key responsibilities

• Architect and monitor security controls across the AWS environment, implementing least-privilege IAM policies and encryption standards
• Embed automated security checks into CI/CD workflows and manage software composition analysis to mitigate vulnerabilities
• Review application code for security vulnerabilities and lead remediation efforts, including managing external penetration tests

Required qualifications

• 3+ years of hands-on experience in Cloud Security, Application Security, or DevSecOps within a cloud-native environment
• Deep expertise in AWS security services, including GuardDuty, Inspector, and IAM policies
• Proven experience integrating automated security checks into CI/CD pipelines using Jenkins or similar tools
• Direct experience with SOC 2 Type II audits and familiarity with compliance automation platforms
• Strong understanding of OWASP Top 10 vulnerabilities and proficiency in Python or Shell scripting for automation