Security Engineer

rvohealth; USA; Remote; USD 100.000 - 130.000; Vollzeit

Benefits dieser Stelle

Health, dental and vision coverage

Paid time off and holidays

Retirement plan matching

Disability and life insurance

Wellness and family support programs

Zusammenfassung

rvohealth is seeking a security engineer to strengthen security across cloud infrastructure, applications, and software delivery in a cloud-native environment. The role combines security engineering, vulnerability management, supply chain safeguards, automation, and incident response in partnership with platform and software teams.

You will design and maintain security controls, improve cloud posture, add guardrails for packages and CI/CD, build self-service automation, assess application

Qualifikationen

• Degree in computer science or related field or equivalent experience.
• 4+ years in application or cloud security.
• Understanding of cloud security architecture; AWS or Azure experience.
• Hands-on with cloud security posture management and remediation.
• Ability to build security automation with at least one language.
• Knowledge of secure coding, incident response, and standards such as NIST CSF, HIPAA, or MITRE ATT&CK.

Aufgaben

• Design and maintain security controls for cloud systems, applications, and data.
• Improve cloud posture and vulnerability management; drive remediation.
• Add guardrails for dependencies and CI/CD pipelines, including AI code controls.
• Build self-service automation and integrations for dev and security tools.
• Assess application security through code reviews and testing; prioritize remediation.
• Weekly on-call rotation for threat escalations and incident response.
• Maintain security procedures and policies aligned with standards and regulatory needs.

Kenntnisse

Cloud security architecture

Vulnerability management

Automation

Incident response

Programming/scripting

NIST CSF/HIPAA/MITRE ATT&CK

Analytical problem solving

Ausbildung

Bachelor's degree in computer science or related field

Tools

AWS

Azure

CNAPP tools

Terraform

GitHub

Jobbeschreibung

Role overview

Help strengthen security across cloud infrastructure, applications, and software delivery in a cloud-native environment. The work combines security engineering, vulnerability management, supply chain safeguards, automation, and incident response, in partnership with platform and software teams.

Responsibilities

• Design and maintain security controls for cloud systems, applications, and sensitive data.
• Improve cloud posture and vulnerability management by tuning scanning coverage, coordinating triage, and driving findings through remediation.
• Add practical guardrails for packages, dependencies, developer extensions, and CI/CD pipelines, including controls for AI-generated code.
• Build self-service automation and integrations for developer and security tools.
• Assess application security through code review and testing, and work with engineering teams to prioritize remediation.
• Join a weekly on-call rotation for threat escalations; investigate incidents, support recovery, and determine root causes.
• Maintain security procedures and policies aligned with relevant standards and regulatory needs.

Requirements

• A degree in computer science or a related field, or equivalent experience.
• At least four years in application security, cloud security, or a related cybersecurity role.
• Solid understanding of cloud security architecture and services; experience with AWS or Azure is preferred.
• Hands‑on experience with cloud security posture or CNAPP tools, including taking findings to closure with engineering teams.
• Ability to build security automation and integrations using at least one programming or scripting language.
• Working knowledge of secure coding, incident response and recovery, and frameworks or regulations such as NIST CSF, HIPAA, or MITRE ATT&CK.
• Strong analytical judgment and problem-solving skills.

Nice to have

• Security certifications such as CISSP, CCSP, OSCP, or GIAC.
• Experience with AWS security controls, Terraform, GitHub, and securing CI/CD workflows.
• Familiarity with AI-assisted development security, internal developer platforms, or working with a managed detection and response provider.

Benefits and work setup

• The listed starting salary is $100,000–$130,000, with the final amount depending on location, qualifications, and experience.
• Benefits include health, dental, and vision coverage; paid time off and holidays; retirement plan matching; disability and life insurance; and wellness and family support programs.