Senior Platform Security Engineer: SOC 2 / HIPAA, Remote

Atomic HR; Boston (MA); Remote; USD 163,000 - 195,000; Full time

Benefits offered by this job

Fully remote in the U.S.

Employer of Record (EOR)

Job summary

Atomic HR is seeking a Senior Security Engineer to own security, privacy, and compliance controls for a govtech platform. You will lead architecture, SOC 2 Type II and HIPAA controls, and drive the NIST 800-series alignment, including threat modeling and incident readiness.

You’ll design identity/authentication, production access, audit logging, and CI/CD release paths, collaborating closely with PMs and leadership. The role is fully remote within the United States.

Qualifications

• 7+ years of software engineering experience, including senior/lead roles on production systems.
• Hands-on SOC 2 Type II and HIPAA controls and audits experience.
• Cloud-native production experience, preferably AWS, with infrastructure as code and CI/CD pipelines.

Responsibilities

• Design how sign-in and access controls work for production environments.
• Define who can access production and how approvals are managed.
• Develop and maintain architectural controls, audit logs, and evidence collection in code.
• Ensure SOC 2 Type II and HIPAA controls are implemented and tested with auditors.
• Lead NIST 800-series alignment and translate requirements into technical roadmaps.

Skills

Senior engineer

SOC 2 Type II

HIPAA

AWS

CI/CD

IAM

Audit logging

Threat modeling

Tools

Terraform

Kubernetes

CloudFormation

Job description

Atomic HR is seeking a Senior Security Engineer to own security, privacy, and compliance controls for a govtech platform. You will lead architecture, SOC 2 Type II and HIPAA controls, and drive the NIST 800-series alignment, including threat modeling and incident readiness.

You’ll design identity/authentication, production access, audit logging, and CI/CD release paths, collaborating closely with PMs and leadership. The role is fully remote within the United States.