Full-Time Security and Compliance Engineer
Job Description
What you will do
- Architect, design, implement, maintain and operate information system security controls and countermeasures
- Analyze and recommend security controls and procedures and provide oversight to ensure compliance
- Monitor systems for vulnerabilities and potential incidents
- Responsible for the administration of authentication and access controls, including provisioning, changes, and deprovisioning of user and system accounts, security/access roles, and access permissions to information assets.
- Responsible for the development and administration of information security training and awareness programs as well as providing security training and onboarding security awareness.
- Responsible for solutions to maintain integrity and security of sensitive personal data such as PII and PHI in accordance with HIPAA best practices
- Ensure current development practices and 3rd party software usage remains compliant with HIPAA standards and best practices
About you
- Minimum of 3 years relevant, hands-on professional experience
- Extensive knowledge in Cloud Security
- Experience with PEN testing techniques, threat assessment, and incident response
- Experience working with complicated systems at scale
- Possess knowledge of common information security and privacy frameworks, such as HIPAA, SOC 2, PCI, etc
- Bonus: Have worked in a regulated industry such as healthcare
Tech we use
- AWS
- Redshift
- Postgres
- Mode
- Rails
- React
- Docker
- Elasticsearch
- Git
How to Apply
Please apply directly on our careers page with the following link: https://jobs.lever.co/sanabenefits/34fb1e64-e5d6-473a-be91-142032ca4e34375 total views, 0 today