Security Engineer - AWS Serverless & Compliance

Stedi; United States; Remote; USD 150,000 - 190,000; Full time

Job summary

Stedi is building a healthcare-focused, headless clearinghouse with a security-first mindset on AWS serverless architectures. As a Security Engineer on the Platform Team, you will influence our AWS infrastructure, CI/CD processes, and endpoint security practices to ensure compliance and robust engineering standards.

You will collaborate with product engineering to raise security in design reviews and deployments, manage security tooling across the org, and advance governance with SOC, HIPAA, and

Qualifications

• 4+ years in security engineering or security-adjacent roles.
• Familiarity with compliance frameworks such as SOC, HIPAA, and HITRUST.
• 4+ years working with AWS services and governance tools like AWS Organizations, CloudTrail, Config, Security Hub, and GuardDuty.
• Proficiency in TypeScript.

Responsibilities

• Develop playbooks and address security-related tasks in our AWS serverless environments.
• Drive improvements in our broader security posture, including application security, endpoint security, access management / just-in-time access, email and web gateways, browser security, and data loss prevention.
• Collaborate with product engineering teams to raise the bar for security, supporting CI/CD pipelines, dependency management, and secure application design reviews.
• Help secure and improve our AWS organization using infrastructure as code (CDK), enforcing security controls, and ensuring strong tenant isolation.
• Continuously assess vulnerabilities and perform regular risk assessments.

Skills

TypeScript

Cloud security

Security tooling

Tools

AWS

CDK

GitHub

Job description

Stedi is building a healthcare-focused, headless clearinghouse with a security-first mindset on AWS serverless architectures. As a Security Engineer on the Platform Team, you will influence our AWS infrastructure, CI/CD processes, and endpoint security practices to ensure compliance and robust engineering standards.

You will collaborate with product engineering to raise security in design reviews and deployments, manage security tooling across the org, and advance governance with SOC, HIPAA, and