Cloud Security & Compliance Architect - HIPAA & SOC 2

Residex®; United States; Presencial; USD 150 000 - 180 000; Tempo integral

Resumo da oferta

Residex is seeking a Senior Security & Compliance Engineer to lead security standards across our AI-powered platform, cloud infrastructure, and healthcare-related data across senior living communities. You will mentor engineers, define least-privilege IAM, and own the SOC 2 Type II and HIPAA programs.

In this role, you will drive incident response, vulnerability management, and vendor risk while partnering with executives to strengthen Residex’s security posture across SaaS, data, and product

Qualificações

• Experience leading investigations or mentoring engineers at a B2B SaaS company.
• Hands-on cloud security design at scale in AWS, Azure, or GCP.
• Experience with enterprise identity platforms including SSO and MFA.
• Direct ownership of full SOC 2 Type II or HIPAA audit cycles.
• HIPAA Security Rule risk analyses and BAA management.
• Secure software development practices with threat modeling and CI/CD.
• Strong scripting/automation to streamline security ops.
• Excellent communication with senior leadership and stakeholders.
• Advanced security certifications (CISSP/CISM) preferred.

Responsabilidades

• Define, review, and approve security standards across Residex’s cloud and apps.
• Lead security monitoring, incident triage, and remediation escalation.
• Direct vulnerability testing programs and remediation accountability.
• Own SOC 2 Type II and HIPAA audits and evidence collection with auditors.
• Manage third-party/vendor risk and security reviews with vendors.
• Define least-privilege IAM standards and implement controls.
• Mature corporate security posture across SaaS systems and identity.
• Mentor engineers on secure coding, threat modeling, and reviews.
• Lead security in product design reviews and infrastructure decisions.
• Drive incident response planning, root-cause analysis, and playbooks.
• Evaluate security tooling and provide build-vs-buy recommendations.
• Design security awareness training and documentation for teams.

Conhecimentos

Security architecture

Leadership

Cloud security

IAM

SIEM/EDR

Vulnerability management

Threat modeling

Secure SDLC

Python/Bash scripting

Communication

Formação académica

CISSP or CISM

Healthcare/regulatory security background

SOC 2/HIPAA audit experience

Ferramentas

SIEM (Splunk/CrowdStrike/Elastic)

EDR tooling

Microsoft Entra ID

Auth0 or equivalent

ISO 27001 knowledge

Descrição da oferta de emprego

Residex is seeking a Senior Security & Compliance Engineer to lead security standards across our AI-powered platform, cloud infrastructure, and healthcare-related data across senior living communities. You will mentor engineers, define least-privilege IAM, and own the SOC 2 Type II and HIPAA programs.

In this role, you will drive incident response, vulnerability management, and vendor risk while partnering with executives to strengthen Residex’s security posture across SaaS, data, and product