Senior Platform Security Engineer Lead

Atomic HR; Boston (MA); Remote; USD 163,000 - 195,000; Full time

Benefits offered by this job

Fully remote in US

Technical ownership

Close collaboration with leadership

Job summary

Atomic HR is seeking a senior security engineer to own the platform's security, privacy, and compliance controls. You will lead SOC 2 Type II and HIPAA initiatives, drive NIST 800-series alignment, and act as the technical partner to the Trust Product Manager.

You will design access controls, audit logs, and secure delivery pipelines. The role requires hands-on cloud and IaC experience in AWS, with a focus on production access, threat modeling, and incident readiness.

Qualifications

• 7+ years of software engineering, with senior/lead experience on production systems.
• Hands-on SOC 2 Type II and HIPAA experience with implemented controls and audits.
• Cloud-native production experience on AWS, IaC, and CI/CD pipelines.
• Identity and access systems design including authentication and RBAC/ABAC, secrets management, and production access controls.
• Threat modeling applied to shipped controls and closed audit findings.
• Ability to trade off enforcement vs. process and explain decisions to product, auditors, and engineers.
• Comfort working autonomously while shaping architecture and operating model.
• Based in the U.S.

Responsibilities

• Design how users and services sign in, define roles/permissions, manage production access, and document requirements.
• Build isolation and audit logging to separate tenants, environments, and data; create testable audit trails.
• Maintain SOC 2 Type II and HIPAA controls; automate evidence collection and close audit findings.
• Secure delivery by implementing CI/CD and infrastructure as code with approvals before production.
• Run threat models on critical workflows and address findings in code and architecture.
• Own incident readiness: logging, detection, runbooks, escalation, and tabletop exercises.
• Translate NIST 800-series requirements into controls and a detailed technical roadmap.

Skills

Senior engineer

SOC 2 Type II

HIPAA compliance

AWS cloud

CI/CD pipelines

Identity access

Audit logging

Threat modeling

Security architecture

Evidence automation

GRC collaboration

Tools

Terraform

CI/CD tooling

Audit tooling

Job description

Atomic HR is seeking a senior security engineer to own the platform's security, privacy, and compliance controls. You will lead SOC 2 Type II and HIPAA initiatives, drive NIST 800-series alignment, and act as the technical partner to the Trust Product Manager.

You will design access controls, audit logs, and secure delivery pipelines. The role requires hands-on cloud and IaC experience in AWS, with a focus on production access, threat modeling, and incident readiness.