Senior Cloud Security Engineer - Remote (AWS, SOC 2/HIPAA)

Openkrill; United States; Remote; USD 151,000 - 179,000; Full time

Benefits offered by this job

Equity options

Remote-first flexibility

Comprehensive benefits

Job summary

AnswersNow is seeking a Staff Cloud Security Engineer to own security across our platform, infrastructure, and corporate environments. You will design scalable, secure cloud systems, set strategy, and collaborate closely with the CTO and engineering teams.

You will lead AWS-based security, IAM, encryption, network controls, and data protection, while embedding security into the SDLC with threat modeling, SAST/DAST, and audits for SOC 2 and HIPAA compliance.

Qualifications

• 8+ years in security engineering with hands-on production cloud security experience
• Deep AWS security expertise (IAM, networking, encryption, logging, detection)
• Strong application and API security background and code review ability
• Experience owning or leading SOC 2 audits (Type I/II) and HIPAA compliance
• Experience with IaC (Pulumi/CFN/CDK) and CI/CD security
• Experience with AI security and guarding OWASP LLM Top 10 vulnerabilities

Responsibilities

• Define the security roadmap and own the security strategy across platform, infrastructure, and corporate environments
• Mentor engineers and foster a security-conscious culture
• Lead threat modeling, secure design reviews, SAST/DAST, and dependency scanning
• Oversee IAM, data protection, key management, and incident response programs
• Manage audits, evidence collection, and vendor security assessments

Skills

Security engineering

AWS security

Application security

Incident response

Security governance

Communication

Education

Bachelor's degree in a related field

Tools

Pulumi

CloudFormation

CDK

CI/CD pipelines

Job description

AnswersNow is seeking a Staff Cloud Security Engineer to own security across our platform, infrastructure, and corporate environments. You will design scalable, secure cloud systems, set strategy, and collaborate closely with the CTO and engineering teams.

You will lead AWS-based security, IAM, encryption, network controls, and data protection, while embedding security into the SDLC with threat modeling, SAST/DAST, and audits for SOC 2 and HIPAA compliance.