Staff Cloud Security Engineer

Job Summary

Seeking a full-time Staff Cloud Security Engineer to architect and secure AWS environments, manage application and API security, and establish AI governance frameworks while working remotely across the US.

Key responsibilities

• Architect and continuously harden AWS environments, implementing security measures across cloud and infrastructure
• Secure APIs and application stacks, embedding security into the software development lifecycle and managing vulnerability assessments
• Own compliance initiatives for SOC 2 and HIPAA, ensuring ongoing readiness and managing security policies and risk assessments

Required qualifications

• 8+ years of experience in security engineering with a focus on securing production cloud environments, particularly AWS
• Deep expertise in AWS security services, IAM, networking, and serverless security
• Experience leading SOC 2 audits and HIPAA compliance, preferably in a healthcare or health-tech setting
• Strong background in application and API security, with the ability to collaborate effectively with development teams
• Experience with Infrastructure-as-Code and CI/CD security practices