Principal Security Engineer – Healthcare Cloud & DevSecOps

Imagine Pediatrics; Texas; On-site; USD 195,000 - 225,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Vision insurance

Equity purchase program

PTO + holidays

Job summary

Imagine Pediatrics in the United States seeks a Principal Security Engineer to set the strategic security vision, secure our cloud and product platforms, and partner with engineering on DevSecOps across care platforms.

You will lead threat modeling, ensure HITRUST/HIPAA compliance, manage on-call incidents, guide AI-adoption securely, and mentor the security team while aligning with business goals.

Qualifications

• Bachelor or equivalent in CS/Info Security or related field.
• GCIH/GSEC/GCLD or equivalent certifications preferred.
• 10+ years in security engineering, with healthcare experience preferred.
• Experience translating HITRUST/HIPAA to technical controls.
• Proven in cloud and identity security across AWS and Azure/EntraID.

Responsibilities

• Define security vision across endpoint, data, and network security.
• Define cloud and identity security strategy for Azure/EntraID and AWS.
• Lead security architecture reviews and threat modeling for services.
• Define DevSecOps strategy and security gates in SDLC/CI-CD.
• Serve as senior escalation point for major security incidents.
• Ensure documentation and evidence pipelines for HITRUST/HIPAA/NIST compliance.

Skills

Security architecture

Threat modeling

Cloud security

DevSecOps

Incident response

HIPAA/HITRUST

AI security awareness

On-call ability

Education

Bachelor's degree in CS/Info Sec/related field

GCIH

GCLD

GSEC

AWS Certified Security – Specialty

Microsoft Certified: Cybersecurity Architect Expert

Tools

AWS

Intune

EntraID

CrowdStrike Falcon

GitHub Advanced Security

Snowflake

JAMF

Meraki

JIRA Service Management

Job description

Imagine Pediatrics in the United States seeks a Principal Security Engineer to set the strategic security vision, secure our cloud and product platforms, and partner with engineering on DevSecOps across care platforms.

You will lead threat modeling, ensure HITRUST/HIPAA compliance, manage on-call incidents, guide AI-adoption securely, and mentor the security team while aligning with business goals.