Senior Platform Security Engineer - Remote (SOC 2 & HIPAA)

Atomic HR; Madison (WI); Remote; USD 163,000 - 195,000; Full time

Benefits offered by this job

Fully remote (U.S.)

Employer of Record employment

Technical ownership of security stack

Collaboration with leadership

Job summary

Atomic HR is seeking a senior security engineer to own the platform's security, privacy, and compliance controls. You will lead architecture, enforce access and audit logging, and drive NIST 800-series alignment for government-grade security.

You will implement SOC 2 Type II and HIPAA controls, automate evidence collection, and collaborate with Product & Engineering leadership in a small, fast-growing team. Fully remote within the U.S.

Qualifications

• 7+ years of software engineering, including senior/lead on production systems.
• Hands-on SOC 2 Type II and HIPAA experience with audits.
• Cloud-native production experience on AWS, including IaC and CI/CD.
• Identity and access systems design and audit logging.
• Threat modeling delivered to production controls.
• Ability to explain trade-offs to product leads and auditors.
• Based in the U.S. and able to work autonomously.

Responsibilities

• Identity & Production Access: design sign-in, roles, and secrets storage.
• Isolation & Audit Logging: separate environments and audit history.
• SOC 2 Type II & HIPAA Controls: maintain controls and close audit findings.
• Secure Delivery: CI/CD with infrastructure as code and approvals.
• Threat Modeling & Review: run models and translate findings to controls.
• Incident Readiness: logging, detection, runbooks, escalation paths.
• NIST 800-series Path: translate requirements into technical controls.

Skills

SOC 2 Type II

HIPAA compliance

AWS

CI/CD

Identity access

Threat modeling

Audit logging

Autonomy

Tools

Node.js

TypeScript

AWS

Job description

Atomic HR is seeking a senior security engineer to own the platform's security, privacy, and compliance controls. You will lead architecture, enforce access and audit logging, and drive NIST 800-series alignment for government-grade security.

You will implement SOC 2 Type II and HIPAA controls, automate evidence collection, and collaborate with Product & Engineering leadership in a small, fast-growing team. Fully remote within the U.S.