Senior Cloud Security Engineer — Secure Healthcare Data

Opala; United States; Remote; USD 163,000 - 192,000; Full time

Benefits offered by this job

Medical, dental, vision coverage

401k with company match

Stock options or RSUs

Paid time off and holidays

Parental leave

Job summary

Opala in the Northwest is seeking a Senior Security Engineer to own the day-to-day operation of cloud security controls across Azure and AWS. You will partner with Platform and Data teams to design guardrails and implement secure-by-design changes in CI/CD.

This is a hands-on role focused on ownership and delivering security outcomes in a healthcare data environment. In your first 90 days you’ll take ownership of posture findings, automate evidence collection for compliance, and coordinate

Qualifications

• 5+ years in cloud security, DevSecOps, or platform engineering.
• Experience securing AWS and Azure with IAM and Defender for Cloud.
• Terraform and scripting for automation.
• Knowledge of software supply chain security and API security.
• Ability to collaborate with developers and product squads on security best practices.

Responsibilities

• Own the operation of Opala's cloud security controls in Azure and AWS, including cloud security posture and vulnerability remediation.
• Confirm that appropriate security testing has been completed for each change (e.g., SAST, DAST, dependency and vulnerability scanning).
• Design and implement Infrastructure as Code guardrails, partnering with the Platform and Data teams so features and data platform changes are secure and compliant by design.
• Integrate logging and monitoring with our MDR/SOC vendor (Arctic Wolf), tune alerting, and investigate security incidents, documenting root cause and remediation.
• Automate evidence collection for compliance controls (e.g., in Drata), support the annual audit cycle, and coordinate third-party penetration testing and remediation.
• Research security enhancements and advise leadership on emerging risks.

Skills

Cloud security

DevSecOps

Dev-team collaboration

Scripting & automation

Tools

Terraform

GitHub Actions

Microsoft Entra ID

AWS IAM

Microsoft Defender for Cloud

AWS Security Hub

Job description

Opala in the Northwest is seeking a Senior Security Engineer to own the day-to-day operation of cloud security controls across Azure and AWS. You will partner with Platform and Data teams to design guardrails and implement secure-by-design changes in CI/CD.

This is a hands-on role focused on ownership and delivering security outcomes in a healthcare data environment. In your first 90 days you’ll take ownership of posture findings, automate evidence collection for compliance, and coordinate