Security engineer in health tech

ТРТ; United States; Remote; USD 120,000 - 160,000; Full time

Benefits offered by this job

Unlimited PTO

New Year’s holidays

Corporate hardware

Modern collaboration tools

Job summary

ТРТ is seeking a Security Engineer to join an international team providing analytical services to healthcare clients. You will harden GCP/GKE, manage secrets and encryption, and secure the software supply chain while supporting HIPAA and SOC 2 compliance.

The role emphasizes collaboration with distributed teams and hands-on security automation, including Terraform-based policy enforcement. Ideal candidates have 1+ years in security-related roles and a strong foundation in networking,

Qualifications

• 1+ years of experience in security-related roles
• Strong communication and collaboration skills with distributed teams
• Hands-on cloud security tooling and practices (IAM, KMS, secrets management, vulnerability scanning, SCC)
• Willing to contribute hands-on to security automation and policy-as-code
• Strong fundamentals in Networking, Cryptography, OS, and algorithms

Responsibilities

• Harden GCP and GKE with least-privilege IAM and policies
• Manage secrets, keys, encryption, and PHI data protection
• Secure the software supply chain with SAST, scanning, signing, and policy gates
• Monitor security posture and incident response activities
• Collaborate on threat modeling, secure design and code reviews
• Support HIPAA and SOC 2 compliance and audit readiness

Skills

Security

Cloud Security

DevSecOps

SRE

Platform Engineering

Communication

Collaboration

Tools

IAM

KMS

Secrets Management

Vulnerability Scanning

Security Command Center

Cloud Build

GitHub Actions

Terraform

GCP

Job description

Описание

A team of experts providing analytical services to healthcare clients is looking for a Security Engineer. You will become part of an international team of highly skilled professionals united by a desire to create products that truly improve the quality of healthcare services.

Задачи

Harden GCP and GKE: least-privilege IAM, Workload Identity, Organization Policies, network policies, and VPC Service Controls, codified in Terraform. Manage secrets, keys, and encryption (Secret Manager, Cloud KMS), and protect PHI with data classification and DLP controls. Secure the software supply chain: SAST, dependency and container scanning, image signing, and policy gates in GitHub Actions and Cloud Build. Monitor security posture and threats (Security Command Center, Cloud Audit Logs), and contribute hands-on to security incident response and root-cause analysis. Collaborate with engineers on threat modeling, secure design and code reviews, and the safe use of LLM/GenAI features. Support HIPAA and SOC 2 compliance: access reviews, risk assessments, evidence collection, and audit readiness. Foster a culture of security, ownership, and continuous improvement.

Требования

• 1+ years of experience in Security, Cloud Security, DevSecOps, SRE, or Platform Engineering roles.
• Good communication and collaboration skills; able to work with distributed teams.
• Hands-on experience with cloud security tooling and practices (IAM, KMS, secrets management, vulnerability scanning, Security Command Center, or similar).
• Self-starter with strong initiative; willing to contribute hands-on to security automation and policy-as-code.
• Demonstrated ability to drive continuous improvement, operational excellence, and security ownership.
• Deep knowledge of fundamentals, such as Networking, Cryptography, Operating Systems, Algorithms and Data Structures, etc, is always prioritized.
• This role is about evolving solutions through Incremental Delivery rather than a Waterfall-style approach.
• Stronger knowledge of Terraform and GCP is always prioritized.

Будет плюсом

Experience with HIPAA, SOC 2, or HITRUST compliance, and threat modeling, is a plus

Условия

The company has an Unlimited PTOs Policy and compensated New Years Holidays on top of that. The misuse of the policy isn’t welcomed, though it’s definitely possible to take at least two weeks – and fully compensated – vacation, or more. The company provides Corporate Hardware for employees who completed their Probationary Period, as well as proven their value. We use Google Workspace, Slack, Zoom, and similar collaboration tools for messaging, meetings, and document sharing across the organization. We don’t use Microsoft Outlook, Microsoft Team and similar software.