Staff Security Engineer Boston

Gradient AI Corp; Mississippi; On-site; USD 80,000 - 140,000; Full time

Job summary

An innovative company is seeking a Staff Security Engineer to enhance its security posture. In this role, you will lead efforts for HITRUST certification, manage security audits, and drive initiatives to protect against cyber threats. Your expertise in AWS security systems and SIEM solutions will be crucial in developing robust security measures. Join a fun, team-oriented startup culture that values flexibility and offers generous stock options, a comprehensive benefits package, and ample opportunities for professional growth. If you are passionate about security and want to make a significant impact, this is the perfect opportunity for you.

Benefits

Generous stock options

Flexible schedule

Full benefits package

Paid parental leave

Opportunities for learning

Qualifications

• 5+ years of experience in security engineering with a focus on AWS.
• Hands-on experience with security audits for SOC2 or HITRUST.

Responsibilities

• Lead HITRUST certification evaluation and improve network security.
• Drive enterprise security initiatives against cyber threats.

Skills

AWS Security Systems

System Security Engineering

SOC2 Audits

Security Information Event Management (SIEM)

Vulnerability Assessment

Job description

Gradient AI is a leading provider of AI solutions for the Group Health and P&C insurance industries. Our solutions improve loss ratios and profitability by predicting underwriting and claim risks with greater accuracy, as well as reducing quote turnaround times and claim expenses through intelligent automation. Gradient AI’s SaaS platform leverages a vast industry data lake comprising tens of millions of policies and claims, providing insurers with high resolution, data-driven insights. Customers include some of the most recognized insurance carriers, MGAs, MGUs, TPAs, risk pools, PEOs, and large self-insured employers across all major lines of insurance. Founded in 2018, Gradient has experienced strong growth every year, and recently raised $56 million in Series C funding from top Insurtech investors.

About the Role:

We are in search of a Staff Security Engineer to manage our overall security posture. You will have a broad knowledge of the security landscape and be able to leverage that knowledge into actionable controls and metrics to make us more secure overall. We are prioritizing candidates based locally in Boston at this time. This role may require periodic onsite presence at our HQ.

How you will make an impact:

Risk/Compliance

1. Lead the evaluation for HITRUST certification and SOC2 report
2. Assess and improve network & data security
3. Implement and automate cloud configuration management to ensure security best practices, compliance, and continuous risk mitigation

Security Operations

1. Drive enterprise security initiatives that enhance the organization’s resilience against cyber threats
2. Manage and optimize our Security Information and Event Management (SIEM) system to ensure accurate threat detection and effective response
3. Develop and fine-tune detection rules to identify and mitigate security threats in real time
4. Conduct assessments, penetration tests, and vulnerability scans to identify and remediate security gaps
5. Ensure timely patching of systems and applications to reduce exposure to known exploits
6. Deploy and manage endpoint detection response (EDR) solutions to monitor, detect, and respond to endpoint threats
7. Manage user authentication, permissions, and identity security to protect access to critical systems
8. Implement and enforce mobile device management (MDM) security policies to safeguard corporate endpoints

Skills needed to succeed:

1. Hands on experience in security systems within AWS
2. 5+ years of experience as System Security Engineer or Information Security Engineer
3. Experience managing security audits for SOC2 or HITRUST
4. Experience in building and maintaining security systems
5. Security Information Event Management (SIEM) solutions

Nice to haves:

1. Familiarity with securing PHI and PII
2. Experience with Data Loss Prevention (DLP)
3. Security related Certifications

What We Offer:

1. A fun, team-oriented startup culture.
2. Generous stock options - we all get to own a piece of what we’re building.
3. Flexible schedule that supports working from home.
4. Full benefits package includes medical, dental, vision, 401k, paid paternal leave, and more.
5. Ample opportunities to learn and take on new responsibilities.

We are an equal opportunity employer.

Apply for this job

* indicates a required field

First Name *

Last Name *

Email *

Phone *

Resume/CV *

Enter manually

Accepted file types: pdf, doc, docx, txt, rtf

LinkedIn Profile *

Will you now or in the future require immigration sponsorship to work in the United States? * Select...

Do you have hands-on experience in security systems within AWS? * Select...

Do you have experience managing security audits for SOC2 or HITRUST? * Select...