Cloud Security Engineer – Hybrid

RVO Health; Charlotte (NC); Hybrid; USD 100,000 - 130,000; Full time

Benefits offered by this job

Health Insurance Coverage

Life Insurance

Disability Insurance

Flexible Spending Accounts

Paid Time Off

Holiday Pay

401(k) with match

Employee Assistance Program

Parental Bonding Benefit Program

Pharmacy Benefits

Income Protection Plans

Pet Services Plans

Mental Health Support

Wellness Coaching

HSA- Health Savings Account

Commuter Benefits

Gym & Fitness Center Discount Program

Job summary

RVO Health is seeking a security-focused professional to strengthen cloud security, posture management, and secure software pipelines across a hybrid Charlotte footprint. You’ll work with engineering teams to reduce risk, implement CNAPP tooling, and enforce secure coding practices in a health-tech environment.

The role includes on-call rotations, policy development, and collaboration with Platform & Software Engineering to address threats.

Qualifications

• Minimum 4+ years of experience in application security, cloud security, or a related cybersecurity role.
• Solid understanding of cloud security principles, architectures, and services (AWS or Azure preferred).
• Hands-on experience with cloud security posture management or CNAPP tooling (e.g., Wiz, Orca, Prisma Cloud).
• Experience building security automation, tooling, and integrations, with scripting or programming language.
• Working knowledge of secure coding practices.
• Knowledge of security frameworks, standards, and regulations (e.g., NIST CSF, HIPAA, MITRE ATT&CK).
• Strong problem-solving and analytical skills, with the ability to think critically and make sound decisions.
• Experience in incident response and recovery.

Responsibilities

• Design, implement, and maintain security controls and architectures to protect the company's cloud infrastructure, applications, and data from cyber threats.
• Improve our cloud security posture and vulnerability management program — pull-request scanning, triage and tracking of findings to closure across engineering teams, and coverage and license optimization.
• Build and enforce software supply chain controls across the developer toolchain — package, dependency, and extension guardrails, with enforcement thresholds tuned to reduce noise rather than generate it.
• Extend security into CI/CD pipelines, including governing AI-authored code at the pipeline chokepoint.
• Build automation, internal tooling, and integrations against our developer platform and security stack so that security controls are self-service rather than ticket-driven.
• Partner with Platform & Software Engineering teams to create visibility and awareness of security issues and work to prioritize their resolution in a collaborative way.
• Perform security assessments, including code reviews and application security testing, to identify and mitigate risk in new and changing systems.
• Participate in a weekly on-call rotation for managed detection and response escalations; investigate potential threats, respond to security incidents, and perform root cause analysis.
• Develop and maintain security standard operating procedures and policies in accordance with industry best practices and regulatory requirements (e.g., HIPAA, NIST CSF).
• Stay informed of the latest developments in tactics, techniques, and procedures related to application and infrastructure vulnerabilities — especially in the healthcare space — and adapt the strategy or tooling to address new threats.

Skills

Application security

Cloud security

Security automation

Scripting

Secure coding

Security frameworks

Incident response

Critical thinking

Regulatory awareness

Education

Bachelor's degree or equivalent

Tools

Wiz

Orca

Prisma Cloud

Terraform

GitHub

DevSecOps workflows

Backstage

MDR / SOC

Job description

RVO Health is seeking a security-focused professional to strengthen cloud security, posture management, and secure software pipelines across a hybrid Charlotte footprint. You’ll work with engineering teams to reduce risk, implement CNAPP tooling, and enforce secure coding practices in a health-tech environment.

The role includes on-call rotations, policy development, and collaboration with Platform & Software Engineering to address threats.