Cyber Security Engineer (Cloud Security)
About The Position
TherapyNotes is seeking an experienced, hands-on Cloud Security Engineer to secure its cloud infrastructure, containerized workloads, and infrastructure-as-code pipelines. The role calls for expertise in cloud security posture management, Kubernetes and container security, and Zero Trust network access, along with comfort working in a healthcare-regulated environment involving HIPAA, HITRUST, and HITECH. The position also contributes to vulnerability management, incident response, and identity and access security as part of a small, collaborative security team. The engineer will focus on Azure cloud security, containerized workloads, cloud security posture, infrastructure-as-code platforms, Microsoft Entra ID, network security, and Zero Trust access. The role also includes security operations, assessments, incident response, automation, security integration into development workflows, and support for audits and compliance activities.
Requirements
- Bachelor's degree in information security, computer science, or a related field preferred; equivalent experience is considered.
- At least 5 years of experience in cloud security engineering or a related role.
- Deep, hands-on experience securing cloud infrastructure and cloud-based applications; Azure preferred and AWS a plus.
- Hands-on network security experience and strong understanding of network architecture, connectivity, segmentation, and firewall controls.
- Experience securing containerized workloads and Kubernetes environments, such as AKS, including network policy, workload identity, and runtime protection.
- Experience with cloud security posture management and remediating cloud misconfigurations.
- Experience securing infrastructure-as-code orchestration platforms, including access control, secrets management, and deployment approval workflows.
- Experience with Microsoft Entra ID, including Conditional Access, Entitlement Management, and just-in-time privileged access models.
- Experience with Zero Trust/SASE tooling, such as Cloudflare Zero Trust, WAF, and Gateway, or equivalent.
- Knowledge of security frameworks such as NIST, ISO 27001, and CIS, and compliance frameworks such as HITRUST and PCI DSS.
- Proven ability to conduct security assessments, vulnerability management, and incident response.
- Strong understanding of Windows and Linux operating systems and endpoint security.
- Strong collaboration skills and ability to work effectively with cross-functional teams.
- Strong work ethic and ownership of projects through completion; adaptable and eager to take on new challenges.
- Commitment to continuous learning and staying current with trends and technologies.
Nice To Haves
- Industry certifications such as CISSP, SSCP, Security+, or an Azure/AWS cloud security certification.
- Familiarity with GitOps tooling such as Argo or Flux for secure Kubernetes deployments.
- Network or Systems Engineering background.
- Familiarity with programming or scripting languages.
Responsibilities
- Manage and secure cloud infrastructure and cloud-based applications, with a focus on Azure.
- Secure containerized workloads and Kubernetes environments, including network policy, workload identity, runtime protection, and container image scanning.
- Own and mature cloud security posture management by identifying and remediating misconfigurations across cloud environments.
- Secure infrastructure-as-code orchestration platforms, including access control, secrets management, and deployment approval workflows for Terraform/OpenTofu pipelines.
- Manage and secure identities in Microsoft Entra ID using Conditional Access, Entitlement Management, and just-in-time privileged access models.
- Review network diagrams and proposed connectivity changes; advise on segmentation and sensitive data flows, and work with IT and SRE teams to address concerns.
- Administer Zero Trust network access and edge security tools to protect access to corporate and cloud resources.
- Manage broader organizational security solutions, including SIEM, DLP, E/XDR, and vulnerability management.
- Monitor security alerts, respond to and escalate incidents, and participate in the incident response on-call rotation.
- Conduct threat analysis, vulnerability assessments, and risk evaluations; document findings, manage mitigation, and report status to leadership.
- Develop queries, scripts, integrations, and automated workflows to improve cloud security operations.
- Collaborate with development teams to integrate security into the SDLC and CI/CD pipeline.
- Conduct periodic cloud configuration and access reviews to ensure compliance with security standards.
- Participate in audits and assessments and support governance, risk management, and compliance efforts.
Benefits
- Competitive salary of $110,000–$130,000.
- Employer-sponsored health, dental, vision, life, and disability insurance.
- Retirement plan with company contribution.
- Annual company profit sharing.
- Personal development and training budget.
- Open, collaborative work environment.
- Extensive two-week onboarding plan.
- Comprehensive mentorship program.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
