Senior Security Engineer, Trust | SOC 2, HIPAA & NIST Lead

Atomic HR; Clifton (TX); Remote; USD 163,000 - 195,000; Full time

Benefits offered by this job

Fully remote in the U.S.

Employer of Record (EOR)

Technical ownership of controls

Direct collaboration with Product &amp

Mission-driven impact

Job summary

Atomic HR is seeking a senior security engineer to own the security, privacy, and compliance controls for its govtech platform. You will advance SOC 2 Type II and HIPAA controls, automate evidence collection, and lead the NIST 800-series alignment in a fully remote U.S. role.

You will design identity, access, audit logging, and secure delivery pipelines, acting as the technical partner to the Trust PM. This is a hands-on leadership position with ownership of architecture and implementation

Qualifications

• 7+ years of software engineering with senior/lead experience.
• Hands-on SOC 2 Type II and HIPAA experience with audits.
• Cloud-native production on AWS with IaC and CI/CD pipelines.
• Identity and access systems design including auth and secrets management.
• Threat modeling to shipped controls and incident handling.
• Ability to explain trade-offs to product, auditors and engineers.
• Based in the U.S.

Responsibilities

• Identity & Production Access: design sign‑in, roles, access approvals, and secret storage.
• Isolation & Audit Logging: keep environments separate and build auditable change history.
• SOC 2 Type II & HIPAA: maintain controls, automate evidence and close findings.
• Secure Delivery: CI/CD release path and IaC with approvals before production.
• Threat Modeling: run threat models and turn findings into engineering requirements.
• Incident Readiness: own logging, detection, runbooks, and escalation paths.
• NIST 800-series Path: translate requirements into controls and a tech roadmap.

Skills

Security architecture

Access control

Threat modeling

Audit logging

Incident response

CI/CD automation

AWS

IaC

Governance

Auditors liaison

Tools

AWS

TypeScript

CI/CD

Job description

Atomic HR is seeking a senior security engineer to own the security, privacy, and compliance controls for its govtech platform. You will advance SOC 2 Type II and HIPAA controls, automate evidence collection, and lead the NIST 800-series alignment in a fully remote U.S. role.

You will design identity, access, audit logging, and secure delivery pipelines, acting as the technical partner to the Trust PM. This is a hands-on leadership position with ownership of architecture and implementation