Cyber Security Engineer (Cloud Security)

TherapyNotes.com•Philadelphia, PA

4d•Remote

About The Position

TherapyNotes is seeking an experienced, hands-on Cloud Security Engineer to secure its cloud infrastructure, containerized workloads, and infrastructure-as-code pipelines. The role focuses on cloud security posture management, Kubernetes and container security, and Zero Trust network access in a healthcare-regulated environment, including HIPAA, HITRUST, and HITECH. It also contributes to broader security engineering work—including vulnerability management, incident response, and identity and access security—as part of a small, collaborative security team. The position works closely with IT, SRE, and development teams to improve security across cloud infrastructure, applications, deployment pipelines, and corporate resources. It supports security operations, compliance, audits, and risk management, while developing automation and workflows to improve cloud security.

Requirements

At least 5 years of experience in cloud security engineering or a related role.
Bachelor’s degree in information security, computer science, or a related field preferred; equivalent experience is considered.
Deep, hands-on experience securing cloud infrastructure and cloud-based applications; Azure preferred and AWS is a plus.
Hands-on network security experience and a strong understanding of network architecture, connectivity, segmentation, and firewall controls.
Experience securing containerized workloads and Kubernetes environments such as AKS, including network policy, workload identity, and runtime protection.
Experience with cloud security posture management and remediating misconfigurations across cloud environments.
Experience securing infrastructure-as-code orchestration platforms, including access control, secrets management, and deployment approval workflows; Terraform or OpenTofu experience is relevant.
Experience with Microsoft Entra ID, including Conditional Access, Entitlement Management, and just-in-time privileged access models.
Experience with Zero Trust or SASE tooling, such as Cloudflare Zero Trust, WAF, or Gateway, or equivalent tools.
Knowledge of security frameworks such as NIST, ISO 27001, and CIS, and compliance frameworks such as HITRUST and PCI DSS.
Proven ability to conduct security assessments, vulnerability management, and incident response.
Strong understanding of Windows and Linux operating systems and endpoint security.

Nice To Haves

Industry certifications such as CISSP, SSCP, Security+, or an Azure/AWS cloud security certification.
Familiarity with GitOps tooling such as Argo or Flux for secure Kubernetes deployments.
A network or systems engineering background.
Familiarity with programming or scripting languages.
Commitment to continuous learning, professional development, and staying current with security trends and technologies.
Ability to engage with new challenges and adapt quickly.
Strong work ethic and ownership of projects through completion.
Strong collaboration skills and ability to work effectively with cross-functional teams.

Responsibilities

Manage and secure cloud infrastructure and cloud-based applications, with a focus on Azure.
Secure containerized workloads and Kubernetes environments, including network policy, workload identity, runtime protection, and container image scanning.
Own and mature cloud security posture management by continually identifying and remediating cloud misconfigurations.
Secure infrastructure-as-code orchestration platforms and Terraform/OpenTofu pipelines, including access control, secrets management, and deployment approval workflows.
Manage and secure identities in Microsoft Entra ID using Conditional Access, Entitlement Management, and just-in-time privileged access models.
Review network diagrams and proposed connectivity changes, advise on segmentation and sensitive data flows, and work with IT and SRE teams to address security concerns.
Administer Zero Trust network access and edge security tools to secure access to corporate and cloud resources.
Manage broader organizational security solutions, including SIEM, DLP, E/XDR, and vulnerability management.
Monitor security alerts, respond to and escalate incidents, and participate in the incident response on-call rotation.
Conduct threat analysis, vulnerability assessments, and risk evaluations; document findings, manage mitigation, and report status to leadership.
Develop queries, scripts, integrations, and automated workflows to improve cloud security operations.
Collaborate with development teams to integrate security into the SDLC and CI/CD pipelines.
Conduct periodic cloud configuration and access reviews to ensure compliance with security standards.
Participate in audits and assessments and support governance, risk management, and compliance efforts.