Remote Senior Cloud Security Engineer (Healthcare SaaS)

7Seventy; United States; Hybrid; USD 140,000 - 160,000; Full time

Benefits offered by this job

Remote work

Job summary

7Seventy is seeking a Senior Information Security Engineer to protect cloud-based healthcare SaaS platforms, infrastructure, and sensitive data. You will design, implement, and manage enterprise-grade security aligned with HIPAA, HITRUST, SOC 2, and NIST 800-53.

The role requires hands-on expertise in cloud security (AWS/Azure), DevSecOps, identity management, endpoint protection, and security automation, with focus on safeguarding PHI and PII across services.

Qualifications

• Bachelor's degree in Computer Science, Information Security, or equivalent experience.
• 5+ years of experience in security engineering or related roles.
• Strong knowledge of cloud security in AWS and Azure environments.
• Hands-on experience with SIEM, EDR/XDR, IAM, vulnerability management, and security automation.
• Familiarity with HIPAA, HITRUST, and SOC 2 compliance requirements.
• Experience securing containerized and serverless environments like Kubernetes (EKS) and AWS Lambda.

Responsibilities

• Design and maintain secure architectures across AWS, Azure, and GCP environments.
• Implement security guardrails and controls using tools such as AWS Security Hub, GuardDuty, Config, and IAM.
• Conduct vulnerability scans, configuration reviews, and track remediation efforts.
• Develop and enforce network segmentation, encryption, and key management policies.
• Integrate security into CI/CD pipelines with DevOps and Engineering teams.
• Perform threat modeling, secure code reviews, and design assessments for microservices and APIs.
• Support penetration testing and application security validation.
• Ensure protection of PHI and PII across SaaS platforms.
• Monitor alerts, investigate security incidents, and coordinate response activities.
• Develop and improve incident response runbooks, playbooks, and forensic procedures.
• Support SIEM integrations and enhance detection capabilities.
• Support audits and evidence collection for HIPAA, HITRUST, SOC 2 and related frameworks.
• Maintain asset inventories, risk registers, and remediation tracking.
• Collaborate with compliance teams to align controls with policies.
• Contribute to security awareness programs and internal training initiatives.

Skills

Cloud security

DevSecOps

Identity management

Endpoint protection

Security automation

SIEM

EDR/XDR

IAM

Vulnerability management

Kubernetes (EKS)

Education

Bachelor's degree in Computer Science or Information Security

Tools

AWS

Azure

GCP

SIEM tooling

EDR/XDR tools

Microsoft Entra ID

Job description

7Seventy is seeking a Senior Information Security Engineer to protect cloud-based healthcare SaaS platforms, infrastructure, and sensitive data. You will design, implement, and manage enterprise-grade security aligned with HIPAA, HITRUST, SOC 2, and NIST 800-53.

The role requires hands-on expertise in cloud security (AWS/Azure), DevSecOps, identity management, endpoint protection, and security automation, with focus on safeguarding PHI and PII across services.