Senior Platform Security Engineer
Core
Securing cloud infrastructure and embedding security practices across engineering squads in a healthcare data environment.
Role type
Senior Platform Security Engineer (DevSecOps)
Builds
Cloud infrastructure guardrails, CI/CD security checks, software supply chain protections, immutable infrastructure, and detection/response integrations.
Domain
Healthcare technology, Cloud Security, DevSecOps
Deliverable
production ML models | product features | infrastructure
Required skills
Cloud security (AWS, Azure), Infrastructure as Code (Terraform, Bash, Azure CLI, AWS CLI, Jinja, CloudInit), CI/CD security (GitHub Actions), Secrets management, Identity solutions, SAST/DAST, Software supply chain security, OpenAPI/Swagger API security, SOC 2 enforcement, HIPAA enforcement, Bash scripting, Incident response, Red/Blue teaming.
Preferred skills
Vendor management, Compliance automation tools (Drata), HITRUST enforcement, Enterprise architecture (TOGAF), Regulated industry experience, PowerShell, Python.
Responsibilities
Monitor and secure Azure + AWS environments, respond to incidents, and remediate vulnerabilities. Design and implement IaC guardrails. Embed security checks into CI/CD pipelines. Build and manage secrets management and identity solutions. Partner with squads to ensure product features are secure and compliant. Investigate security breaches and document root cause. Integrate logging/monitoring with SOC/MDR vendors. Perform SAST/DAST testing and strengthen software supply chain security. Develop and implement an immutable infrastructure strategy. Build and execute red team and blue team strategies. Research security enhancements and advise leadership.
Seniority
Senior, hands-on IC with mentorship responsibilities