Cybersecurity Engineer

OneImaging; Bellevue (WA); On-site; USD 100,000 - 130,000; Full time

Benefits offered by this job

Health Care Plan

Retirement Plan

Paid Time Off

Work From Home

Stock Option Plan

Job summary

A leading tech company in Bellevue, WA is seeking a proactive Cybersecurity Engineer to enhance cloud security measures. The candidate will manage compliance with SOC 2, HIPAA, and PCI DSS, utilizing tools like AWS and Terraform, while working in a dynamic environment. This full-time position offers a comprehensive benefits package including health care and retirement plans.

Qualifications

• 5+ years in cybersecurity engineering, cloud security, or DevSecOps.
• Deep experience with AWS security services.
• Strong proficiency with Terraform.
• Experience with Sumo Logic or equivalent tools.
• Familiarity with securing CI/CD in GitHub.

Responsibilities

• Architect and enforce security best practices for AWS infrastructure.
• Define and enforce compliant infrastructure using Terraform.
• Build and tune log pipelines and alerts.
• Collaborate with engineering on security in CI/CD workflows.
• Manage and respond to vulnerability findings across layers.

Skills

Cloud Security Engineering

Terraform

AWS security services

Vulnerability management

Incident response

Tools

Sumo Logic

Kubernetes

Job description

Overview

We are seeking a proactive and detail-oriented Cybersecurity Engineer to join our growing security team. In this role, you will be responsible for designing, implementing, and maintaining technical security controls across our cloud infrastructure. You will play a critical role in helping the organization meet and maintain compliance with SOC 2, HIPAA, and PCI DSS, while building scalable defenses that support our DevOps and engineering workflows.

Responsibilities

• Cloud Security Engineering: Architect and enforce security best practices for AWS infrastructure, including IAM hardening, network segmentation, encryption, monitoring, and access control.
• Infrastructure as Code Security: Use Terraform to define and enforce compliant infrastructure. Maintain guardrails and reusable secure modules to support a security-by-default approach.
• Threat Detection & Monitoring: Build and tune log pipelines and alerts in Sumo Logic to identify misconfigurations, anomalous behavior, and potential threats.
• CI/CD and Code Security: Collaborate with engineering to embed security into GitHub workflows and CI/CD pipelines. Implement controls for code scanning, secrets management, and artifact integrity.
• Vulnerability Management: Manage and respond to vulnerability findings across cloud, container, and application layers. Prioritize remediation based on risk and regulatory requirements.
• Audit & Compliance Engineering: Implement and maintain technical controls to meet SOC 2, HIPAA, and PCI DSS requirements. Partner with Compliance and GRC teams during audits and readiness assessments.
• Incident Readiness: Assist in the development and testing of the incident response plan. Participate in threat simulations and security incident handling.
• Security Enablement: Support security education, documentation, and enablement efforts across engineering and operations teams.

Requirements

• Required:
• 5+ years in cybersecurity engineering, cloud security, or DevSecOps.
• Deep experience with AWS security services (IAM, KMS, VPC, Config, GuardDuty, etc.).
• Strong proficiency with Terraform and Infrastructure as Code best practices.
• Experience with Sumo Logic or equivalent log management tools.
• Familiarity with securing CI/CD and development workflows in GitHub.
• Demonstrated knowledge and practical experience implementing and maintaining compliance for SOC 2, HIPAA, and PCI DSS.
• Strong understanding of vulnerability management, threat detection, and response.

• Nice to Have:
• Experience with Kubernetes security (EKS, container scanning).
• Experience writing security policies or helping with control mapping.
• Certifications such as AWS Security Specialty, CISM, CISSP, or GCPN

Benefits

• Health Care Plan (Medical, Dental & Vision)
• Retirement Plan (401k, IRA)
• Life Insurance (Basic, Voluntary & AD&D)
• Paid Time Off (Vacation, Sick & Public Holidays)
• Family Leave (Maternity, Paternity)
• Short Term & Long Term Disability
• Work From Home
• Stock Option Plan

Seniority level

• Mid-Senior level

Employment type

• Full-time

Job function

• Information Technology
• Industries: IT Services and IT Consulting