Senior Information Security Engineer

About the role

The Senior Information Security Engineer will protect Reveleer's cloud‑based healthcare SaaS platform, AI/ML systems, infrastructure, and customer data. This role focuses on securing AI pipelines, models, and protected health information while aligning with HIPAA, HITRUST, SOC 2, and NIST standards.

Key responsibilities

• Design and maintain secure architectures across AWS, Azure, and GCP, using IaC security (Terraform, CloudFormation) and policy‑as‑code (OPA, Sentinel, AWS SCPs).
• Implement and operate CSPM/CNAPP tools (Wiz, Prisma Cloud, Orca) and guardrails such as Security Hub, GuardDuty, Macie, and Azure Defender.
• Secure containerized and serverless workloads (EKS/ECS, Lambda) with image scanning, runtime protection, and least‑privilege roles.
• Partner with data science teams to secure AI/LLM pipelines, applying OWASP Top 10 for LLMs, MITRE ATLAS, and AI gateway controls.
• Embed security into CI/CD pipelines (SAST, DAST, SCA, secrets scanning) and manage software supply chain risk (SBOM, artifact signing).
• Manage endpoint and identity security, including EDR/XDR platforms, Microsoft Entra ID, Conditional Access, and MFA.
• Lead security operations, incident response, detection content creation, and SOAR automation.
• Support audits and compliance evidence collection for HIPAA, HITRUST, SOC 2, NIST 800‑53, and AI‑specific regulations.

Required profile

• Bachelor’s degree in Computer Science, Information Security, or equivalent experience.
• 5+ years of hands‑on security engineering experience.
• Strong knowledge of cloud‑native security across AWS, Azure, and GCP.
• Experience with HIPAA, HITRUST, NIST, and SOC 2 compliance frameworks.
• Proven ability to secure containerized and serverless workloads.

Required skills

• AWS, Azure, GCP
• Terraform, CloudFormation, Ansible
• OPA, Sentinel, AWS SCPs
• Security Hub, GuardDuty, Macie, Inspector, Config
• Wiz, Prisma Cloud, Orca
• EKS, ECS, Lambda
• Docker, Kubernetes, HashiCorp Vault
• Python, PowerShell, Bash
• Snyk, StackHawk, Semgrep
• Palo Alto Cortex XDR, Microsoft Defender for Endpoint
• Microsoft Entra ID, Conditional Access, PIM, MFA