Senior Cybersecurity Engineer - GCP & HIPAA

Sphere Technology; Manila; Remote; PHP 1,200,000 - 1,800,000; Full time

Job summary

Sphere Technology is hiring its first dedicated Cybersecurity Engineer to own the full security posture of a growing telehealth platform and EHR system handling PHI. This senior, hands-on role builds a security foundation across engineering culture, CI/CD pipelines, and GCP-native cloud infrastructure to keep us defensible as we scale across healthcare verticals.

You will be Sphere's first security hire, reporting to engineering leadership and partnering with product and backend teams daily.

Qualifications

• 5+ years of experience in application security or security engineering.
• Hands-on experience with DevSecOps tooling (Snyk, Trivy, Semgrep, GitHub Advanced Security, HashiCorp Vault, OWASP ZAP).
• Strong GCP security fundamentals (Security Command Center, Cloud Armor, Chronicle SIEM, VPC Service Controls, IAM, Cloud Logging).
• Direct experience with HIPAA, HITECH, or comparable regulated environments (SOC 2, PCI-DSS, ISO 27001 a plus).
• Proficiency in at least one scripting/automation language (Python, Bash, or similar).
• Solid understanding of web application security (OWASP Top 10, API security, auth/authz patterns).
• Ability to work independently and cross-functionally - sole security voice for 12-18 months.
• Excellent written communication - document policies, explain risk to non-technical stakeholders.

Responsibilities

• Own Application & Cloud Security across web apps, APIs, and GCP infrastructure; implement security controls across environments and healthcare verticals.
• Integrate security gates into CI/CD pipelines: SAST/DAST, dependency scanning, secrets detection, container image scanning, secure coding standards.
• Maintain HIPAA/HITECH compliance posture with technical safeguards, access controls, audit logging, encryption standards, and BAA oversight.
• Run vulnerability assessments, manage risk register, triage findings, drive remediation with engineering.
• Own the Incident Response plan; lead detection, containment, and post-mortem for incidents.
• Document security policies and architecture decisions for smooth handoff to a future CISO.
• Be the go-to security resource for engineering and product to make PHI protection a default.

Job description

Sphere Technology is hiring its first dedicated Cybersecurity Engineer to own the full security posture of a growing telehealth platform and EHR system handling PHI. This senior, hands-on role builds a security foundation across engineering culture, CI/CD pipelines, and GCP-native cloud infrastructure to keep us defensible as we scale across healthcare verticals.

You will be Sphere's first security hire, reporting to engineering leadership and partnering with product and backend teams daily.