Remote Staff Cloud Security Lead (AWS, SOC2 & HIPAA)

AnswersNow; United States; Remote; USD 151,000 - 179,000; Full time

Benefits offered by this job

Remote-first

Equity options

Medical, dental, vision

Generous PTO

Job summary

AnswersNow seeks a Staff Cloud Security Engineer to own security across the platform, infrastructure, and corporate environment. You will set strategy, build the program, and perform hands-on work, partnering with the CTO and engineering team.

This role is autonomous, influences risk decisions, and aims to elevate the organization's security maturity. You’ll lead SOC 2 and HIPAA readiness, AI governance, and incident response while shaping security as a core capability.

Qualifications

• 8+ years of security engineering experience, with hands-on cloud security.
• Experience securing production cloud environments, preferably AWS-heavy.
• Strong background in application and API security, with code/architecture reviews.

Responsibilities

• Architect, secure, and harden AWS environments (IAM, VPC, KMS, logging, WAF).
• Secure serverless/data layers (Lambda, S3, PostgreSQL) with encryption and least-privilege access.
• Implement IaC security guardrails and policy-as-code.
• Own secrets management and certificate lifecycle.
• Harden EKS infrastructure, including cluster security and network policies.
• Secure APIs, auth, session management, and OWASP/API Top 10.
• Embed security into SDLC with threat modeling, SAST/DAST, scanning, and CI/CD security.
• Secure real-time video platform (WebRTC) and media transport.
• Oversee vulnerability management and pen-testing program.

Skills

Security engineering

AWS security

PostgreSQL security

Application security

SOC 2 / HIPAA compliance

Infrastructure as Code

CI/CD security

AI security

Incident response

Clear communication

Tools

Pulumi

CloudFormation

CDK

Job description

AnswersNow seeks a Staff Cloud Security Engineer to own security across the platform, infrastructure, and corporate environment. You will set strategy, build the program, and perform hands-on work, partnering with the CTO and engineering team.

This role is autonomous, influences risk decisions, and aims to elevate the organization's security maturity. You’ll lead SOC 2 and HIPAA readiness, AI governance, and incident response while shaping security as a core capability.