Staff Cloud Security Engineer
Core
Design scalable, secure cloud systems and enable data-driven decision-making for a digital health platform delivering virtual autism care.
Role type
Staff Cloud Security Engineer (single owner of security)
Builds
Secure AWS infrastructure, serverless/data layers, APIs, real-time video platform, and AI/ML capabilities
Domain
Healthcare technology, Cloud Security, AI Security, Compliance (SOC 2, HIPAA)
Deliverable
production ML models
Required skills
AWS security (IAM, VPC, KMS, GuardDuty, Security Hub), Infrastructure-as-Code (Pulumi/CDK), Application/API security, SOC 2 audit leadership, HIPAA compliance, AI/LLM security (OWASP LLM Top 10), Incident response, PostgreSQL security
Preferred skills
Vanta/Drata experience, WebRTC security, HITRUST/ISO 27001/NIST frameworks, Pediatric health data privacy
Technologies
AWS, Lambda, S3, PostgreSQL, EKS, WebRTC, Vanta, Pulumi, CloudFormation, CDK
Responsibilities
Architect and harden AWS environments; Secure serverless and data layers; Implement IaC security guardrails; Secure APIs and application stack; Establish AI usage policies and secure in-product AI/ML; Own SOC 2 and HIPAA compliance programs; Manage endpoint and corporate security; Build logging, monitoring, and incident response capabilities; Define security roadmap and mentor engineers
Seniority
Staff, hands-on IC with strategic autonomy
