Lead Security Operations Engineer

WHAT YOU’LL ACCOMPLISH

• Security by design - Employ your deep understanding in AWS service and security best practices to design and implement security by design principles to ensure secure development . Stay abreast of industry trends and changing threat landscape and review technologies and services and make recommendations to continuously improve our capabilities
• Provide solutions to complex security problems with new services -  Design and deliver security solutions for new services by evaluating potential risks, stakeholder needs, and available tooling as well as custom solutions. 
• Security, Compliance and Regulations.  Meet all compliance regulations including HIPAA, privacy and other relevant security frameworks. Ensure that new services introduced into our environment adhere to all relevant compliance obligations.  Take a proactive approach to mitigate potential risks 
• Cyber Security Operations - Develop and drive cybersecurity initiatives related to incident response, threat intelligence, vulnerability management, monitoring and reporting tools – to continuously improve and expand capabilities
• Identity and Access Management - Design and implement IAM solutions - enabling secure and granular access controls for users and applications, enforcing least privilege principles, and utilizing automation for privilege escalation, approvals, and overall developer experience. 
• Security Governance, Auditing and Assessment - Collaborate with internal and external auditors to ensure continuous compliance with security standards. Implement security and IAM governance processes that align with our enterprise security policies.  Enhance the security knowledge of engineers, empowering them to contribute to a secure cloud environment.

BASIC QUALIFICATIONS

• Bachelor’s degree in technical/engineering/scientific area or comparable education/experience
• 7+ years of cloud experience
• 5+ years of experience in cloud security operations, specifically AWS. 
• Expert knowledge of enterprise IT infrastructure technology, systems, vulnerability and incident management processes
• Experience developing Terraform and updating existing infrastructure as code to conform with security standards.
• Excellent communication skills, including the ability to convey complex security related concepts to technical and non-technical audiences alike.

PREFERRED QUALIFICATIONS

• AWS Certifications
• SOC, PCI, HIPAA training certifications
• Knowledge of low-level networking principles
• Experience managing an Enterprise IDP, especially Okta
• Deep, low-level understanding of OAUTH2 and SAML

WHAT YOU'LL LOVE ABOUT US

• Inclusive healthcare and benefits: On top of comprehensive medical, dental, and vision coverage, we offer employees and their family members help with gender-affirming care, tools for family and fertility planning, and travel reimbursements if healthcare isn’t available where you live.
• Planning for the future: Start saving for the future with our traditional or Roth 401k retirement plan options which include a 2% company match.
• Modern life stipends: Manage your own learning and development