Cloud Security Engineer

Medclinicx; San Francisco (CA); On-site; USD 150,000 - 210,000; Full time

Job summary

Med Clinic X is a healthcare technology company focused on secure, cloud-native digital health systems across the United States. We are seeking a Cloud Security Engineer to design, implement, and maintain secure cloud environments for healthcare SaaS platforms and digital health systems.

You will protect sensitive healthcare data, secure cloud infrastructure, and ensure compliance across AWS, Azure, or GCP environments used by healthcare organizations in the United States.

Qualifications

• Bachelor’s degree in Cybersecurity, CS, Info Security, or related field.
• Experience in cloud security, DevSecOps, or infrastructure protection.
• Strong understanding of AWS, Azure, or GCP console environments.
• Expertise in container security (Docker, Kubernetes/EKS).
• Experience running SIEM tools (Splunk, ELK, AWS GuardDuty).

Responsibilities

• Secure cloud infrastructure for healthcare SaaS.
• Protect patient databases and clinical APIs from threats.
• Implement active security controls across AWS/Azure platforms.
• Monitor and resolve security incidents in real time.
• Integrate security checks into CI/CD release loops.
• Perform secure threat reviews for database infrastructures.
• Automate cloud testing configurations with Terraform logs.
• Provide reporting data to support compliance audits.

Skills

Cloud security

DevSecOps

Container security

SIEM tools

Education

Bachelor's degree in Cybersecurity/CS/Info Security

Tools

Docker

Kubernetes/EKS

Splunk/ELK

AWS GuardDuty

Job description

Med Clinic X is a healthcare technology company building secure, cloud-native digital health systems for healthcare organizations across the United States.

We develop healthcare SaaS platforms, AI-powered healthcare systems, patient portals, telemedicine solutions, automation workflows, and scalable cloud-based digital health infrastructure.

Our mission is to ensure every healthcare system we build is secure, compliant, and resilient against evolving cyber threats.

Job Overview

We are seeking a Cloud Security Engineer to design, implement, and maintain secure cloud environments for healthcare SaaS platforms and digital health systems.

In this role, you will protect sensitive healthcare data, secure cloud infrastructure, and ensure compliance across AWS, Azure, or GCP environments used by healthcare organizations in the United States.

You will collaborate closely with DevOps, cloud engineers, and software teams to build secure-by-design healthcare systems.

Responsibilities

Cloud Security & Protection

• Secure cloud infrastructure for healthcare SaaS.
• Protect patient databases and clinical APIs from threats.
• Implement active security controls across AWS/Azure platforms.
• Monitor and resolve security incidents in real time.

DevSecOps & CI/CD Gating

• Integrate security scanning checks into CI/CD release loops.
• Perform secure threat reviews for database infrastructures.
• Implement vulnerability scanning on container dependencies.
• Automate cloud testing configurations using Terraform logs.

Compliance & Risk Audit

• Ensure cloud security compliance with HIPAA standards.
• Enforce key rotations, data encryption, and access controls.
• Provide reporting data to support compliance audits.
• Assess and patch vulnerabilities across active cloud platforms.
• Monitor system alerts and security logs via Splunk/ELK.
• Investigate and respond to unauthorized ingress alerts.
• Determine root causes and remediate system weaknesses.
• Build proactive alerts for suspicious admin user roles.

Qualifications

Required

• Bachelor’s degree in Cybersecurity, CS, Info Security, or related field.
• Experience in cloud security, DevSecOps, or infrastructure protection.
• Strong understanding of AWS, Azure, or GCP console environments.
• Expertise in container security (Docker, Kubernetes/EKS).
• Experience running SIEM tools (Splunk, ELK, AWS GuardDuty).

Preferred

• Experience securing US healthcare platforms or clinical SaaS.
• Familiarity with HIPAA, HITRUST, or SOC 2 auditing protocols.
• Expertise with HashiCorp Vault, AWS KMS, or encryption systems.
• Certifications such as CISSP, CCSP, or AWS Security Specialty.

Why Join Med Clinic X?

At Med Clinic X, you will help secure the systems that power modern healthcare delivery. You will:

• Protect real healthcare platforms used across the US
• Secure cloud-native SaaS and AI healthcare systems
• Work closely with elite engineering, DevOps, and product teams
• Build enterprise-grade healthcare security and compliance controls

Technical Core

Cloud Platform Security (AWS/Azure/GCP) IAM & Role-Based Access Controls SIEM log monitoring (Splunk/ELK) Container security (Docker/K8s) KMS Cryptographic Key Management DevSecOps CI/CD security gating

Key Systems Involved

Configure ingress filtering rules and secure API paths connecting hospital nodes.

Cloud-Based Clinical Systems

Audit container orchestration boundaries and host networking configurations.

Patient Data Security Systems

Establish encryption-at-rest policies on patient databases and backup nodes.

EHR/EMR Integrations

Scan integration queues and encrypt API keys used by external health portals.

Harden GPU clusters and secure pipeline inputs feeding into medical NLP models.

Conduct automated security audits to verify HIPAA and HITRUST compliance rules.