lever
Staff Cloud Security Engineer
Included Health
Remote, USA
Full-time
Senior · 5+ years experience
Remote
USD 161410-296400 yearly / year
Discovered 1 weeks ago
PythonGoTerraformDockerKubernetesAWS
Free
Job Fit Check
Base Career helps you apply smarter for this job.
?%
Ready to ScanKey skills for this role
PythonGoTerraform
Key Skills for This Role
PythonGoTerraformDockerKubernetesAWS
Full Job Posting
- Design, develop, and implement a comprehensive authorization framework for cloud resources, addressing user roles, resource-specific restrictions, task-based access, and granular engineering access
- Lead the technical implementation of Just-In-Time (JIT) access control systems for production environments (systems, secrets, data) to minimize standing privileges for engineering and platform teams.
- Collaborate with engineering to integrate data classification (e.g., safe-harbor annotations) with access control mechanisms, ensuring that data sensitivity directly informs access decisions.
- Develop and maintain security automation scripts, tools, and services in Python or Go to streamline security operations, vulnerability management, compliance checks, and incident response.
- Write clean, maintainable, and testable code (primarily Python and Go; familiarity with Ruby is a plus) for security automation, building custom security integrations, and developing security-focused tools.
- Implement and champion Infrastructure as Code (IaC) principles, specifically using Terraform, for programmatic definition, enforcement, and auditing of security configurations.
- Contribute to the design and implementation of centralized security controls, such as an engineering-owned Web Application Firewall (WAF), to manage rate limiting, IP blocking, input validation, and request filtering.
- Partner with engineering teams to establish and implement secure practices for managing the development toolchain (code generation utilities, linters, browser extensions, CLI tools, IDE plugins) to mitigate supply chain risks.
- Design and help implement a secure, "blessed" mechanism for webhook testing in local development environments, blocking unauthorized tunneling tools.
- Define, implement, and enforce container security hardening standards (e.g., least privilege, no unnecessary utilities, limited internet access) in collaboration with engineering teams.
- Drive the remediation of legacy cloud environments, particularly in GCP, by inventorying, assessing, and improving security controls.
- Design and implement solutions for granular data access control in cloud environments, particularly addressing compliance requirements for handling sensitive data.
- Collaborate closely with infrastructure software, engineering, DevOps, and product teams to co-design and integrate robust, automated security controls into systems, architectures, and CI/CD pipelines.
- Act as a subject matter expert on cloud security (AWS, GCP), providing guidance, code reviews (Python, Go), and technical expertise on secure cloud adoption, secure software development, and access control best practices.
- Support organizational change management efforts related to new security controls and practices by providing technical rationale and assisting in the development of new workflows.
- Conduct security assessments, threat modeling, and contribute to incident response, developing automation for prevention and faster response.
- Develop and maintain comprehensive documentation for security architectures, controls, automation scripts, and incident response playbooks.
- Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field.
- 5+ years of experience in cloud security, with a strong emphasis on designing, developing (primarily in Python and Go), and implementing security solutions in AWS.
- Proven hands-on software development experience, particularly in Python and Go, for security automation, building security tools, and infrastructure management.
- Demonstrable experience designing and implementing robust authorization and access control frameworks (e.g., RBAC, ABAC, policy-as-code) and Just-In-Time (JIT) access solutions.
- Experience with Infrastructure as Code (IaC) with deep proficiency in writing and maintaining Terraform modules for security.
- Experience with containerization (Docker, Kubernetes/EKS), including hands-on experience hardening containerized environments.
- Experience with SDLC security, CI/CD pipeline security integration, and secure software development practices.
- Experience with security logging, monitoring, alerting tools (e.g., SIEM, AWS CloudTrail, CloudWatch, GuardDuty), and scripting against their APIs (Python, Go).
- Experience with cloud security frameworks (especially HIPAA), regulations, and standards.
About Included Health
Physician Practices & Outpatient Clinics2000 employeesFounded 2011
Integrated virtual care and navigation platform.
Visit company websiteApply for this job in 1 click
Skip the repetitive application forms
Install the Base Career Chrome Extension and autofill job applications across major job boards with your profile.
Trusted by over 500,000 job seekers on Base Career
More from this employer
More jobs at Included Health
General Interest - Clinical & Behavioral Health
, USA
MidFull Time, Part Time
Discovered 6 days agoView →
General Interest - Clinical & Behavioral Health
, USA
Discovered 6 days agoFull Time, Part Time
CA Based Licensed Nurse Care Manager, Adult
, USA
Discovered 6 days agoFull-time
CA Based Licensed Nurse Care Manager, Adult
, USA
Discovered 6 days agoFull-time
CA Licensed Nurse Care Manager, Adult
, USA
Discovered 6 days agoFull-time
Remote Nurse Practitioner
, USA
Discovered 6 days agoFull Time, Part Time
Psychiatrist
, USA
Discovered 1 weeks agoFull-time
Remote Mental Health Therapist
, USA
Discovered 1 weeks agoContract
Virtual Primary Care Nurse Practitioner
, USA
Discovered 1 weeks agoFull-time