Senior Security Engineer — Cloud, PHI & Incident Response

Rezilient Health; Oregon; Hybrid; USD 120,000 - 180,000; Full time

Benefits offered by this job

Stock options

Competitive base compensation

Medical, dental, and vision coverage

401(k) retirement plan

Flexible Paid Time Off

Paid Sick Leave

11 paid company holidays

Paid family leave

Health Savings Account (HSA)

Job summary

Rezilient Health seeks a Senior Security Engineer to protect PHI/PII across cloud, clinical, and corporate systems. You will design security controls, lead threat modeling, and own tooling and incident response in a fast-growing healthcare tech environment.

You will collaborate with Engineering, IT, Product, and Compliance to embed security into the SDLC, drive risk reduction, and support SOC 2/HIPAA/HITECH/HITRUST compliance with hands-on leadership.

Qualifications

• Bachelor's degree or equivalent practical experience.
• 5+ years in information security or security engineering, preferably in healthcare, SaaS, or cloud environments.
• Hands-on experience securing AWS cloud environments (IAM, networking, encryption, logging).
• Background in application security, threat modeling, secure code review, and security testing tools in CI/CD.
• Experience with IAM, endpoint security, security monitoring, and incident response.
• Familiarity with SOC 2, HIPAA/HITECH, HITRUST, ISO 27001/27002, or NIST CSF, and audits.
• Proficiency in scripting (Python/Go/Bash) and infrastructure as code (Terraform).
• Excellent communication and ability to operate as a senior IC in a startup setting.
• PHI data protection experience is highly preferred.
• Relevant security certifications are a plus.

Responsibilities

• Design, implement, and maintain security controls across Rezilient’s cloud infrastructure and data protection measures.
• Lead threat modeling and security design reviews for features and integrations.
• Own application security tooling, including static/dynamic analysis and container scanning.
• Establish secure development standards and coach engineers on secure coding practices.
• Coordinate incident response, tabletop exercises, and vulnerability management across teams.
• Provide technical evidence for SOC 2, HIPAA/HITECH, HITRUST, and audits.

Skills

Cloud security

Threat modeling

Incident response

Security governance

Security tooling

Communication

Education

Bachelor's degree in Computer Science, Cybersecurity, IT, or related field

Tools

AWS

Terraform

CI/CD security tooling

SIEM

Job description

Rezilient Health seeks a Senior Security Engineer to protect PHI/PII across cloud, clinical, and corporate systems. You will design security controls, lead threat modeling, and own tooling and incident response in a fast-growing healthcare tech environment.

You will collaborate with Engineering, IT, Product, and Compliance to embed security into the SDLC, drive risk reduction, and support SOC 2/HIPAA/HITECH/HITRUST compliance with hands-on leadership.