Remote Security Engineer with Cloud Native

security engineering and information security role focuses on protecting cloud-native healthcare systems, managing compliance in a HIPAA-regulated environment, and embedding robust security practices into software, APIs, and distributed platforms.Core ResponsibilitiesCloud & Product Security: Partner with engineering and platform teams to build security directly into cloud environments, APIs, production systems, and software lifecycles.Compliance & Audits: Oversee and maintain compliance frameworks such as HITRUST and SOC 2, alongside internal/external healthcare audits and customer security reviews.Threat Management: Build and mature threat detection, response capabilities, vulnerability management, and identity and access management (IAM).AI & Data Governance: Lead risk assessments, establish rules for acceptable use, and enforce compliance guardrails for AI tools and data handling.Incident Response: Lead responses to security incidents and collaborate on business continuity, cyber resilience, and disaster recovery testing.Key RequirementsHealthcare Regulations: Practical, deep knowledge of the HIPAA Security Rule and protecting electronic protected health information (ePHI).Technical Stack: Strong background in cloud security architecture, secure development practices, vulnerability remediation workflows, and automated testing.Environment: Experience scaling security programs within fast-paced startup, scale-up, or cloud-native digital health organizations.