Senior InfoSec Engineer: Cloud, AI & Health Tech Security

Reveleer; United States; Hybrid; USD 130,000 - 190,000; Full time

Benefits offered by this job

Competitive salary

Medical, Dental and Vision benefits

401k match

Generous PTO plan

Job summary

Reveleer is seeking a Sr. Information Security Engineer to safeguard our cloud‑based health SaaS platform, AI/ML systems, and customer data. You will design, implement, and operate enterprise‑grade security controls aligned with HIPAA, HITRUST, SOC 2, NIST 800‑53, and NIST AI RMF.

The role emphasizes securing AI pipelines and PHI across cloud environments. You will own secure architectures on AWS/Azure/GCP, enforce IAM and network controls, and partner with DevSecOps to embed security into CI/CD

Qualifications

• Bachelor’s degree in Computer Science, Information Security, or equivalent experience.
• 5+ years of experience in security engineering or related technical security roles.
• Strong knowledge of cloud‑native security (AWS, Azure, GCP) and modern SaaS architectures.
• Hands‑on experience with SIEM, EDR/XDR, IAM, vulnerability management, and security automation.
• Familiarity with HIPAA, HITRUST, NIST, and SOC 2 requirements.
• Experience securing containerized and serverless workloads (e.g., EKS, Lambda).

Responsibilities

• Design and implement secure architectures across AWS, Azure, and GCP.
• Secure AI/ML pipelines, PHI/PII handling, and governance across cloud platforms.
• Embed security into CI/CD and IaC pipelines using SAST, DAST, SCA, and IaC scanning.
• Conduct threat modeling, secure design reviews, and code reviews for microservices and APIs.
• Manage identity security with Entra ID, CA, PIM, and access controls; enable MFA and passwordless.
• Oversee security operations: monitoring, incident response, and tabletop exercises.
• Maintain vendor and third‑party risk reviews with a focus on AI subprocessors.

Job description

Reveleer is seeking a Sr. Information Security Engineer to safeguard our cloud‑based health SaaS platform, AI/ML systems, and customer data. You will design, implement, and operate enterprise‑grade security controls aligned with HIPAA, HITRUST, SOC 2, NIST 800‑53, and NIST AI RMF.

The role emphasizes securing AI pipelines and PHI across cloud environments. You will own secure architectures on AWS/Azure/GCP, enforce IAM and network controls, and partner with DevSecOps to embed security into CI/CD