Security Leader for HIPAA-Secured SaaS (Remote)

VetClaims.ai; United States; À distance; USD 120 000 - 180 000; Plein temps

Avantages offerts par ce poste

Remote-first team

Competitive salary and benefits

Room to grow with the company

Résumé du poste

VetClaims.AI is seeking a hands-on security leader to own security execution alongside the CISO. Build and deploy our security program end-to-end, from controls in cloud to HIPAA compliance and workforce training.

You'll design secure SDLC practices, implement logging and incident response, and drive risk assessments across our SaaS platform. This role combines strategy with engineering in a startup, remote-friendly environment.

Qualifications

• 7+ years in information security with leadership experience.
• Bilingual English/Spanish—fluent in spoken and written communication.
• Hands-on security for cloud-native SaaS platforms, with log management or SIEM experience.
• Scripting skills (Python, Bash, or similar) and API integrations.
• Experience implementing a security framework (NIST CSF, NIST AI RMF, ISO 27001) and risk assessments.
• Strong communication skills to translate risk for executives, engineers, and staff.

Responsabilités

• Define and execute VetClaims' security strategy, roadmap, and priorities.
• Design, implement, and operate security controls across cloud infrastructure, applications, and corporate systems.
• Establish secure SDLC practices with engineering: code reviews, dependency scanning, secrets management, PHI handling.
• Design, implement, and maintain centralized logging and SIEM tooling.
• Lead investigation and response for security incidents and develop incident response playbooks.
• Support HIPAA compliance and risk assessments across the organization.

Connaissances

Security leadership

Cloud security

Scripting

Risk assessment

Communication

Bilingual EN/ES

Outils

SIEM tooling

GCP

Cloudflare

APIs

Description du poste

VetClaims.AI is seeking a hands-on security leader to own security execution alongside the CISO. Build and deploy our security program end-to-end, from controls in cloud to HIPAA compliance and workforce training.

You'll design secure SDLC practices, implement logging and incident response, and drive risk assessments across our SaaS platform. This role combines strategy with engineering in a startup, remote-friendly environment.