Cybersecurity Engineer

Medclinicx; San Francisco (CA); On-site; USD 120,000 - 180,000; Full time

Job summary

Med Clinic X is a healthcare technology company delivering secure, modern digital health systems for US providers. We seek a Cybersecurity Engineer to design, implement, and maintain security for healthcare SaaS platforms and patient data.

You will safeguard cloud infrastructure, applications, APIs, and healthcare data systems nationwide, collaborating with engineering, DevOps, and cloud teams to ensure strong security posture and HIPAA compliance across products.

Qualifications

• Experience designing and implementing security for cloud-based healthcare SaaS platforms.
• Experience auditing HIPAA security controls and data protection.
• Experience with incident response and security monitoring.
• Familiarity with DevSecOps practices and secure CI/CD pipelines.

Responsibilities

• Secure healthcare SaaS platforms, APIs, and networks.
• Audit vulnerabilities and implement fixes across cloud and container environments.
• Monitor networks for threats and respond to incidents.
• Lead security governance, risk, and compliance activities.

Skills

Cloud security

Application security

HIPAA compliance

SIEM

Threat detection

IAM

DevSecOps

CI/CD security

Kubernetes

AWS

Azure

GCP

Tools

AWS

Azure

GCP

Kubernetes

Splunk

Job description

Med Clinic X is a healthcare technology company building secure, modern digital health systems that support healthcare organizations across the United States.

We develop healthcare SaaS platforms, AI-driven healthcare systems, patient portals, telemedicine solutions, automation workflows, and cloud-based digital health products for clinics, hospitals, and healthcare providers.

Our mission is to ensure every healthcare system we build is secure, compliant, and resilient against modern cyber threats.

Job Overview

We are seeking a Cybersecurity Engineer to design, implement, and maintain security systems that protect healthcare SaaS platforms and sensitive patient data.

In this role, you will safeguard cloud infrastructure, applications, APIs, and healthcare data systems used across the United States. You will work closely with engineering, DevOps, and cloud teams to ensure strong security posture across all Med Clinic X products.

You will play a critical role in protecting patient data and ensuring compliance with healthcare security standards.

Responsibilities

• Secure healthcare SaaS platforms, APIs, and networks.
• Protect patient records and private database schemas.
• Audit system vulnerabilities and design fixes.
• Monitor networks for threat incursions or anomalies.
• Implement security controls in AWS, Azure, or GCP.
• Secure containerized nodes and Kubernetes setups.
• Execute application penetration tests and code audits.
• Enforce DevSecOps parameters in build pipelines.

Compliance & Governance

• Align platform setups with HIPAA security rules.
• Audit dynamic access controls & identity configurations.
• Lead compliance audits and prepare security proofs.
• Maintain security documentation profiles.
• Audit security alert feeds and logs in SIEM (Splunk).
• Manage incident response workflows and recovery steps.
• Build automated alerting systems for compliance breaches.
• Review threat modeling profiles across engineering.

Why Join Med Clinic X?

At Med Clinic X, you will help protect the core systems that power modern healthcare delivery. You will:

• Secure real healthcare systems used by US providers
• Protect sensitive patient and clinical data
• Work directly with cloud, AI, and software engineering teams
• Build enterprise-grade healthcare security systems

Technical Core

Cloud Infrastructure Security Application Security & Code Reviews HIPAA Security Auditing SIEM Threat Detection & Monitoring Identity Access Management (IAM) DevSecOps CI/CD security integration

Key Systems Involved

Build network security boundaries and secure API endpoints.

Cloud-based clinical systems

Audit container orchestration security standards in AWS/Azure clusters.

Deploy cryptographic keys and encryption policies for electronic health records.

Audit video stream authentication handshakes and media encryption keys.

Implement data-loss prevention rules to protect clinical outcomes databases.

Scan ingress hooks and verify token authentications on dynamic web services.