Senior Security Engineer
Employment Information
Report this job
Job expired or something wrong with this job?
Job Description
Senior Security Engineer securing AxisCare’s SaaS platform for home care agencies. Owning SOC 2 compliance, AWS infrastructure security, AI risk controls, and incident response.
Responsibilities:
- Own AxisCare Engineering's security program as an individual contributor
- Continually improve security standards, strengthen enforcement systems, and work with engineers to close gaps
- Own engineering's share of SOC 2 Type II compliance, including control design, evidence collection, audit preparation, and gap remediation
- Chart the path toward HITRUST certification
- Threat-model the application and infrastructure
- Improve security across the PHP/React, AWS, Terraform, Docker, and MySQL/RDS stack
- Own and improve the security scanning program, tune findings, reduce false positives, and drive developer action
- Assess and mitigate risks in AI products, including prompt injection, data leakage, model output filtering, and abuse scenarios
- Set guardrails for AI-assisted development workflows
- Strengthen logging, alerting, detection, and incident response playbooks
- Coordinate penetration tests, track findings, and drive remediation
- Maintain clear, current, concise security policies
- Train developers on secure practices
Requirements:
- 5+ years in application security, infrastructure security, or security engineering at a SaaS company
- Hands-on experience with AWS security, including IAM, VPC, Security Groups, KMS, CloudTrail, and GuardDuty
- Experience owning or heavily contributing to the engineering side of SOC 2 Type II compliance
- Familiarity with container security, Docker, Kubernetes, and infrastructure-as-code with Terraform
- Solid grasp of web application security fundamentals, OWASP Top 10, and secure SDLC
- Experience securing AI/ML systems or LLM-powered products
- Concrete examples of using AI to improve security work
- Ability to work remotely from Eastern, Central, or Mountain time zones
- Qualified to work in the United States or Canada
- Strong written communication skills
- Manual dexterity required to use a desktop computer and peripherals
Benefits:
- Medical insurance is covered in full for the employee (Medical, Dental, and Vision)
- Company will provide laptop and other needed computer equipment
- Fully remote work arrangement
Similar Jobs
IT Security Engineer
IT Security Engineer safeguarding sensitive healthcare information for Legacy Community Health, a Southeast Texas federally qualified health center. Monitoring threats, assessing risks, and strengthening Microsoft cloud and infrastructure security.
Security Advisor, Falcon Complete
Security Advisor guiding CrowdStrike Falcon Complete customers toward stronger cybersecurity postures. Assessing environments, recommending remediation, and coordinating technical issue resolution.
Senior Security Specialist
Senior Security Specialist supporting SAIC’s defense and hypersonics mission. Developing security programs, classification guidance, training, access controls, and incident response.
Senior Security Engineer – Red Team
Senior Red Team Engineer securing Coupa’s AI-powered spend management platform. Testing web, mobile, API, and AI/LLM systems while developing autonomous security-testing agents.
CyberSecurity Consultant – Contractor
Cybersecurity Consultant securing Microsoft Cloud infrastructure and applications for Avertium clients. Leading security architecture, integration, controls, and cybersecurity projects remotely in the United States.
CyberSecurity Consultant
Cybersecurity Consultant securing Microsoft Cloud infrastructure and applications for Avertium clients. Leading architecture, integration, security controls, and cybersecurity strategy projects.
Cloud Security, IAM Architect
Microsoft Cloud Security/IAM Architect securing Dataverse and Dynamics environments for federal IT infrastructure. Designing identity controls, sensitive-data protections, auditing, monitoring, and incident-response documentation.
Staff AI Security Engineer
Staff AI Security Engineer securing Addepar’s global investment data and AI platform. Leading AI security architecture, guardrails, governance, automation, and organization-wide security initiatives.
Information Security Consultant – SMB
Information Security Consultant delivering GRC advisory services for Cognisys, a cybersecurity consultancy. Strengthening client governance, risk management and compliance across recognised security frameworks.
Security Engineer
Security Engineer securing AlertMedia’s risk intelligence and response SaaS platform. Improving AWS, application, compliance, monitoring, and customer security capabilities.
Staff Product Security Engineer
Staff Product Security Engineer building customer identity and authentication services for Affirm’s buy-now-pay-later platform. Designing secure, scalable CIAM backend systems and integrations.
Staff Product Security Engineer
Staff Product Security Engineer building CIAM backend services for Affirm’s buy-now-pay-later platform. Securing authentication, authorization, and account lifecycle flows at scale.
Application Security Consultant
Application Security Consultant advising inovex clients on secure architectures, SDLC, vulnerability management, and software supply-chain security. Developing trainings, reviewing applications, and advancing security consulting products.
Security Engineer
Palo Alto Networks Security Engineer optimizing NGFW security policies and Cortex XDR for Arctiq’s technology-services clients. Automating administration and troubleshooting complex network security issues.
Security Engineer, IAM
Security Engineer governing identity access, privileged reviews, remediation, and exceptions. Supporting audit-ready IAM operations for a U.S.-based organization.
Atlassian Platform Specialist – Jira, Confluence
Atlassian specialist rebuilding NATO’s Jira-Confluence cyber operations platform as a working mock-up. Capturing testable requirements and delivering video and live industry demonstrations.
Atlassian Consultant – Requirements Capture, Demonstration, Security Clearance
Atlassian consultant rebuilding NATO’s Jira-Confluence cyber operations platform as a working mock-up. Capturing AQAP-compliant requirements and demonstrating the replacement capability to industry.
Defense Information Systems Security Officer – Cloud
Cloud ISSO securing U.S. Marine Corps modernization through RMF, Azure, containers, and AI security. Developing ATO artifacts and monitoring compliance for mission-critical workloads.
Senior Security Professional
Senior security professional managing Honeywell Aerospace access control, CCTV, and cybersecurity systems. Implementing physical security infrastructure, incident response, cloud security controls, and Unified Access strategies.
RACF Mainframe Security Engineer
RACF Mainframe Security Engineer securing Huntington Bank’s IAM capabilities and mainframe technologies. Leading RACF operations, incident response, architecture alignment, and security engineering delivery.