Lead Trust Engineer – Security, Privacy & Compliance (Remote)

Atomic HR; California; Teletrabalho; USD 163 000 - 195 000; Tempo integral

Vantagens oferecidas por esta oferta de emprego

Remote in US

Employer of Record (EOR)

Technical ownership

Leadership collaboration

Mission-driven impact

Resumo da oferta

Atomic HR seeks a senior security-focused engineer to own the platform's security, privacy, and compliance controls. You will lead the technical side of SOC 2 Type II and HIPAA, drive NIST 800-series alignment, and partner with the Trust Product Manager to translate requirements into code.

You will start by moving evidence collection and access reviews into infrastructure code, then own the security architecture and release governance for a secure, scalable platform used nationwide in fully

Qualificações

• 7+ years of software engineering with senior/lead experience on production systems.
• Hands-on SOC 2 Type II and HIPAA controls implemented and audited.
• Cloud-native production experience on AWS, with IaC and CI/CD pipelines.
• Identity and access systems design including authentication and audit logging.
• Threat modeling and translating findings into shipped controls.

Responsabilidades

• Own architecture of security, privacy and compliance controls.
• Design sign-in, roles, and secret storage; determine production access.
• Implement SOC 2 Type II and HIPAA controls in codebase and tooling.
• Lead threat modeling and ensure testable audit evidence.
• Develop CI/CD release path and infrastructure as code with approvals.
• Collaborate with Product & Engineering leadership in a small team.

Conhecimentos

Senior engineer

SOC 2 Type II

HIPAA compliance

AWS cloud

IAM / access controls

Threat modeling

Audit logging

CI/CD pipelines

Production systems

Ferramentas

AWS

CI/CD

Infrastructure as Code

Descrição da oferta de emprego

Atomic HR seeks a senior security-focused engineer to own the platform's security, privacy, and compliance controls. You will lead the technical side of SOC 2 Type II and HIPAA, drive NIST 800-series alignment, and partner with the Trust Product Manager to translate requirements into code.

You will start by moving evidence collection and access reviews into infrastructure code, then own the security architecture and release governance for a secure, scalable platform used nationwide in fully