Cybersecurity Engineer
Core
Building and owning platform/software security, establishing ISMS, managing vulnerability programs, and hardening cloud infrastructure.
Role type
Cybersecurity Engineer (Platform/Software Security)
Builds
ISMS, Vanta compliance, Trust Center, vulnerability management, AWS/Kubernetes security baselines, incident response playbooks
Domain
Healthtech / SaaS / Cybersecurity
Required skills
vulnerability assessment, threat modeling, incident response, AWS security (IAM, network segmentation, secrets management), SIEM/IDS/IPS, penetration testing, DevSecOps (SAST/DAST), compliance frameworks (ISO 27001, SOC 2, GDPR)
Preferred skills
regulated industry experience (HIPAA, MDR), zero-trust architecture, Auth0, container security (Docker, Kubernetes), IaC scanning (Checkov), security certifications (CEH, OSCP, CISSP, AWS Security Specialty)
Technologies
AWS, Kubernetes, Terraform, Burp Suite, Metasploit, SIEM, IDS/IPS, Auth0, Docker, Checkov
Responsibilities
Build ISMS from scratch and lead ISO 27001 Stage 1 audit; Achieve Vanta green status and manage Trust Center; Execute penetration tests and remediate findings; Manage vulnerability management across code, dependencies, and IaC; Harden AWS and Kubernetes baselines; Develop and test incident response playbooks including GDPR breach notification
Seniority
Mid-level, hands-on IC
