Remote Lead Security Engineer, Trust & Compliance (SOC 2/HIPAA)

Atomic HR; California City (CA); Remote; USD 163,000 - 195,000; Full time

Job summary

Atomic HR is seeking a senior security engineer to own security, privacy, and compliance controls across SOC 2 Type II, HIPAA, and NIST pathways. You will act as the technical partner to the Trust Product Manager, owning architecture and working systems.

You will start with SOC 2 Type II and HIPAA controls, moving manual evidence collection into code, and drive a secure delivery model with CI/CD and infrastructure as code, while collaborating with a small US-based team.

Qualifications

• 7+ years of software engineering with senior/lead production experience.
• Hands-on SOC 2 Type II and HIPAA controls and audit history.
• Cloud-native production experience on AWS with IaC and CI/CD.
• Designs authentication, authorization, secrets management and audit logging.

Responsibilities

• Own identity and production access design, roles, and secret storage.
• Implement isolation, audit logging, and continuous control monitoring.
• Maintain SOC 2 Type II and HIPAA controls with auditors.
• Build secure CI/CD pipelines and release processes with IaC.
• Translate threat models into engineering requirements and fixes.
• Lead incident readiness with runbooks, detection, and tables.

Skills

SOC 2 Type II

HIPAA compliance

AWS / cloud-native

Identity & access management

Threat modeling

Audit logging

CI/CD / IaC

Tools

AWS

CI/CD pipelines

Infrastructure as Code

Audit tooling

Job description

Atomic HR is seeking a senior security engineer to own security, privacy, and compliance controls across SOC 2 Type II, HIPAA, and NIST pathways. You will act as the technical partner to the Trust Product Manager, owning architecture and working systems.

You will start with SOC 2 Type II and HIPAA controls, moving manual evidence collection into code, and drive a secure delivery model with CI/CD and infrastructure as code, while collaborating with a small US-based team.