Senior Security Engineer - HIPAA & Cloud Defense (Remote)

Healthmark Medical; United States; Remote; USD 130,000 - 190,000; Full time

Job summary

HealthMark Group is seeking a Sr. Security Engineer to join a remote Security and IT Operations team focused on protecting health information.

You will lead design and deployment of cybersecurity controls across cloud and on-premise environments to ensure HIPAA compliance and support regulatory audits. The role requires deep technical expertise, leadership, and the ability to communicate security concepts to non-technical stakeholders while staying current with evolving threats and best

Qualifications

• Bachelor’s degree or higher in a technical field.
• At least 5 years in senior engineering roles with security focus.
• Experience with AWS, Azure or GCP.
• Experience with HIPAA, NIST, SOC2 and HITrust controls.
• Security certifications (CISSP/CSSLP/CCFP/CISM) preferred.
• Familiarity with Agile (Scrum/Kanban).
• Strong Windows OS and network protocol knowledge.

Responsibilities

• Ensure HIPAA compliance by safeguarding PHI entrusted by clients.
• Design and implement security architecture using HIPAA/NIST frameworks.
• Assess cloud security posture and implement improvements.
• Configure, troubleshoot, and maintain security tooling and services.
• Collaborate with SecOps, Legal, and Compliance on policies and procedures.
• Manage IAM, access reviews, and audits.
• Lead audits like SOC 2 Type 2, HITrust, PCI.
• Coordinate security incident response with MSP.
• Mentor staff on cyber security practices.
• Document security controls and incident response processes.

Skills

HIPAA compliance

Cloud IAM

Security architecture

NIST/SOC2/HITrust

Vulnerability management

SecOps leadership

Windows OS

Education

Bachelor's degree in CS/Engineering or related

Tools

AWS

Azure

GCP

Active Directory

Microsoft Entra

Job description

HealthMark Group is seeking a Sr. Security Engineer to join a remote Security and IT Operations team focused on protecting health information.

You will lead design and deployment of cybersecurity controls across cloud and on-premise environments to ensure HIPAA compliance and support regulatory audits. The role requires deep technical expertise, leadership, and the ability to communicate security concepts to non-technical stakeholders while staying current with evolving threats and best