Senior Security & Compliance Architect

Residex, LLC; United States; On-site; USD 130,000 - 200,000; Full time

Job summary

Residex, LLC is seeking a Senior Security & Compliance Engineer to lead security standards across its AI-powered platform and SaaS stack. You will mentor engineers and drive security initiatives spanning data protection, identity, and incident response.

You will own audits (SOC 2 II, HIPAA), manage third-party risk, and shape least-privilege access across the environment, partnering with executives and product teams.

Qualifications

• Hands-on cloud security experience at scale (AWS/Azure/GCP).
• Direct ownership of SOC 2 Type II or HIPAA audits.
• Experience with IAM, SSO, MFA, and privileged access.
• Threat modeling, secure coding, and CI/CD security.
• Strong communication to executives and stakeholders.

Responsibilities

• Define, review, and approve security standards and strategy across Residex’s cloud infra and apps.
• Lead security event monitoring with SIEM/EDR; manage alert triage and remediation.
• Direct vulnerability assessments and pentests; triage findings by risk.
• Own SOC 2 Type II and HIPAA audits; coordinate evidence with auditors.
• Manage vendor risk reviews and security terms with partners.
• Define least-privilege IAM standards; review SSO/MFA and RBAC implementations.
• Mature corporate security posture across SaaS systems including Entra ID and M365.
• Mentor engineers on secure coding, threat modeling, and reviews.
• Lead incident response planning, root-cause analysis, and post-incident reporting.
• Evaluate security tooling; advise build-vs-buy decisions.
• Develop security awareness training and documentation for teams.

Skills

Security leadership

Threat modeling

Secure coding

Executive communication

Incident response

Automation scripting

Education

CISSP

CISM

HCISPP

CCSP

GCIH

GCFA

GCFE

CEH

CySA+

Tools

Splunk

CrowdStrike

Elastic

Microsoft Entra ID

Auth0

Job description

Residex, LLC is seeking a Senior Security & Compliance Engineer to lead security standards across its AI-powered platform and SaaS stack. You will mentor engineers and drive security initiatives spanning data protection, identity, and incident response.

You will own audits (SOC 2 II, HIPAA), manage third-party risk, and shape least-privilege access across the environment, partnering with executives and product teams.