Senior Platform Security Engineer — SOC 2, HIPAA, NIST (Remote)

Atomic - Remote Jobs; Alexandria (VA); À distance; USD 163 000 - 195 000; Plein temps

Avantages offerts par ce poste

Fully remote within the U.S.

Salary: $14,583–$17,500 USD/month

Full-time employment via EOR

Technical ownership of control design

Direct collaboration with leadership

Mission-driven impact protecting data

Résumé du poste

Atomic - Remote Jobs seeks a senior engineer to own security, privacy and compliance controls for a govtech platform serving families across the U.S. You’ll lead architecture, not just reviews, and own SOC 2 Type II, HIPAA, and NIST initiatives.

Collaborate with Product leadership to align governance, requirements, and roadmap. You’ll start by evolving SOC 2 Type II and HIPAA controls, moving manual tasks into code, and then drive threat modeling, incident readiness, and FedRAMP-aligned

Qualifications

• 7+ years of software engineering with senior role on production systems.
• Hands-on SOC 2 Type II and HIPAA controls experience.
• Cloud-native production experience on AWS with IaC and CI/CD.
• Identity and access systems design and audit logging.
• Ability to justify security trade-offs to product, auditors, and engineers.
• Based in the U.S.

Responsabilités

• Identity & Production Access: design sign-in, roles, and secrets storage.
• Decide production access flow and approvals; implement with the Trust PM.
• Write design and code; align requirements with governance.
• Isolation & Audit Logging: separate environments and data; build audit trails.
• SOC 2 Type II & HIPAA: maintain controls; close audit findings with auditors.
• Secure Delivery: CI/CD path and infrastructure-as-code with approvals.
• Threat Modeling & Review: run threat models and turn findings into requirements.
• Incident Readiness: own logging, runbooks, detection, and escalation.
• NIST 800-series Path: translate requirements into controls and roadmaps.

Connaissances

Security architecture

SOC 2 Type II

HIPAA compliance

NIST 800-series

AWS / IaC

CI/CD security

Access control

Threat modeling

Formation

Bachelor's degree in Computer Science

Outils

AWS

Terraform

GitHub Actions

Description du poste

Atomic - Remote Jobs seeks a senior engineer to own security, privacy and compliance controls for a govtech platform serving families across the U.S. You’ll lead architecture, not just reviews, and own SOC 2 Type II, HIPAA, and NIST initiatives.

Collaborate with Product leadership to align governance, requirements, and roadmap. You’ll start by evolving SOC 2 Type II and HIPAA controls, moving manual tasks into code, and then drive threat modeling, incident readiness, and FedRAMP-aligned