Senior Security Engineer
Employment Information
Report this job
Job expired or something wrong with this job?
Job Description
Senior Security Engineer securing Redox’s cloud-native healthcare data interoperability platform. Hardening Kubernetes, containers, infrastructure, and application security across U.S.-based remote engineering teams.
Responsibilities:
- Own Cloud Security Posture Management including Kubernetes and Container security practices, admission control, network policies, image integrity, and environment hardening
- Manage comprehensive vulnerability lifecycles, prioritizing remediation based on actual production exposure
- Collaborate with Platform Engineering to support secure SDLC and CI/CD safeguards, focusing on artifact validity and pipeline integrity
- Convert HITRUST and SOC 2 compliance frameworks into actionable technical configurations and operational controls
- Evaluate and secure infrastructure-as-code across all environments
- Execute incident response duties, including forensic investigation and blameless post-mortem analyses
- Contribute to security standards within Engineering through design reviews, collaborative pairing, and mentorship of peers
- Support bug bounty triage and maintain professional engagement with external security researchers
- Take ownership of cloud-native and application security across the Redox platform
- Perform code reviews and translate control gaps into engineering proposals that drive production impact
- Embed security into the SDLC through container security, Kubernetes hardening, and architecture reviews
Requirements:
- 5+ years in security engineering with a track record of hands-on delivery across system hardening, security engineering projects, and peer mentorship
- Strong technical proficiency in Kubernetes security, specifically network policy orchestration, admission control (Kyverno), and container hardening protocols
- Experience with threat modeling for applications built using Node.js, TypeScript, Python or Go
- Hands-on experience supporting secure SDLC practices and CI/CD safeguards using GitHub Actions, ensuring artifact validity and pipeline integrity
- Direct experience hardening Infrastructure-as-Code (Terraform) and managing enterprise secrets via AWS Secrets Manager, Vault, or similar platforms
- Solid experience across the vulnerability management lifecycle, from initial triage to production remediation
- Ability to apply compliance frameworks like HITRUST and SOC 2 into pragmatic technical controls that align with engineering workflows
- Strong written communication skills, with the ability to clearly document decisions and collaborate effectively within a remote, asynchronous organizational culture
- Proficiency in AI tools and techniques, including prompt engineering and hands-on experience across multiple large language model platforms, with a demonstrated ability to automate workflows using AI
Benefits:
- 100% remote first culture (must be based in the US)
- Unlimited Flexible Time Off
- 15+ Observed Holidays
- Rest & R^Charge days (guaranteed a 3-day weekend each month)
- R^Charge (6 weeks paid sabbatical + stipend)
- 401k match 50% for up to 8% on Day 1
- Medical/Dental/Vision Benefits on Day 1
- HSA & FSA, Life, Disability, Medical Travel & Employee Assistance Program
- Paid Parental Leave (16 weeks)
- Productivity Stipend & Wellness Fund
- Redox Issued MacBook
- Virtual and/or in-person Team & Company Events
- Stock Options
- Employee Referral Bonus Program
Similar Jobs
Regional Security Manager
Regional Security Manager protecting Saab’s defence and security operations across Southern Africa. Coordinating personnel, risk, compliance, crisis response and regional security strategy.
Principal Security Architect
Principal Security Architect owning cloud and application security for Lilly’s AWS-heavy strategic programs. Protecting trade secrets through architecture reviews, threat modeling, and risk governance.
Senior Security Architect
Senior Security Architect designing scalable cybersecurity solutions for Humana’s healthcare insurance and CenterWell services. Supporting cloud, application, risk, compliance, automation, and acquisition integration initiatives.
Managing Engineer – Data Security Engineering
Managing Engineer leading Allstate’s data security engineering team. Building automated DLP, data intelligence, and data access controls for insurance operations.
SAP Security Consultant – AMS
SAP Security Consultant administering roles, authorizations, and access governance for DyFlex clients. Supporting audits, SoD analysis, GRC, upgrades, and managed SAP environments.
Senior Security Engineer, Customer Transparency
Senior Security Engineer improving customer transparency for Tanium’s AI-powered endpoint management and security platform. Managing vulnerability disclosure, SBOM visibility, bug bounty operations, and security advisories.
Técnico/a de Seguridad, PAM – CyberArk
Técnico/a PAM CyberArk administrando cuentas privilegiadas, credenciales y Safes. Soporte de servicios gestionados de ciberseguridad para un cliente financiero de Logicalis Spain.
Domain Lead – Transformation, Cybersecurity Strategy Adoption
Cybersecurity transformation lead embedding policies, change management, and security adoption across SNCB/NMBS. Driving workforce engagement and governance for Belgium’s national railway.
Senior IT Systems, Security Engineer
Senior engineer implementing secure identity, endpoint, cloud, and network systems for Defense Unicorns’ federal and enterprise customers. Supporting compliance-ready software delivery and cybersecurity operations.
IT Systems, Security Engineer
IT Systems & Security Engineer implementing and securing customer IT environments for Defense Unicorns. Configuring identity, endpoints, networks, compliance controls, and automation.
Mid-Level Information System Security Officer, ISSO
ISSO owning cybersecurity posture and RMF compliance for systems supporting a large federal agency. Leading assessments, continuous monitoring, POA&M remediation, and authorization readiness.
Cyber Security Engineer
Cyber Security Engineer protecting HBK’s global enterprise IT environment. Securing cloud, network, endpoint, identity, and AI systems for a global test and measurement leader.
Senior Information Systems Security Engineer
Senior ISSE authorizing Navy cybersecurity systems for Leidos' enterprise IT program. Managing RMF, ATO packages, STIGs, vulnerability compliance, and DoD security documentation.
Security Engineer
Security Engineer leading advanced penetration testing and agentic AI workflows for Cisco’s cloud and on-premises products. Identifying vulnerabilities and guiding remediation to strengthen global customer security.
Senior Cloud Security Engineer
Senior Cloud Security Engineer securing complex client Azure environments. Leading cloud security architecture, incident response, IAM, compliance, and automation initiatives.
Cybersecurity Engineer
Cybersecurity Engineer securing Business Wire’s applications, cloud, and IT systems. Integrating security testing, vulnerability management, incident response, and security awareness practices.
Senior Product Security Engineer
Senior Product Security Engineer securing Staffbase’s AI-native employee experience platform. Improving security automation, Kubernetes and CI/CD security, and vulnerability detection.
Senior Penetration Testing Analyst
Senior penetration tester conducting application or network security assessments for Sophos, a cybersecurity provider. Leading client readiness, exploitation testing, reporting, and remediation discussions.
SAP Security Consultant – Contract
SAP Security Consultant designing and delivering ECC, S/4HANA, Fiori, BTP, and GRC security solutions. Supporting SAP implementations and operations for leading Australian enterprises.
Senior Security Engineer
Senior Security Engineer hardening beverage-industry technology platforms across VIP’s U.S. operations. Leading segmentation, detection, vulnerability, identity, and incident-response engineering.