Staff Security Engineer

📋 Description

• Own cloud security posture management, including Kubernetes and container security, admission
• Manage the complete vulnerability lifecycle, prioritizing remediation according to real-world
• Partner with Platform Engineering to establish secure SDLC and CI/CD practices, with particular
• Translate HITRUST and SOC 2 requirements into practical technical configurations, security
• Review and harden infrastructure-as-code across environments, including Terraform-based deployments
• Lead incident response activities, including forensic investigations, remediation coordination, and

🎯 Requirements

• 8+ years of experience in security engineering, with demonstrated Staff-level impact through
• Deep expertise in Kubernetes security, including network policy orchestration, admission control
• Strong experience with threat modeling applications built with technologies such as Node.js
• Proven ability to establish secure SDLC practices and CI/CD security controls using GitHub Actions
• Hands-on experience securing infrastructure-as-code, particularly Terraform, and managing
• End-to-end experience managing vulnerability programs, from initial triage and risk assessment

🎁 Benefits

• Fully remote work within the continental United States.
• Opportunity to work on security infrastructure supporting large-scale healthcare data exchange.
• High degree of autonomy and ownership within a small, senior security team.
• Opportunity to influence engineering architecture, security standards, and technical roadmaps.
• Collaborative, transparent, and asynchronous working environment.
• Exposure to modern cloud-native technologies, Kubernetes, infrastructure automation, and emerging