Cybersecurity Engineer

OneImaging

144d

About The Position

We are seeking a proactive and detail-oriented Cybersecurity Engineer to join our growing security team. In this role, you will be responsible for designing, implementing, and maintaining technical security controls across our cloud infrastructure. You will play a critical role in helping the organization meet and maintain compliance with SOC 2, HIPAA, and PCI DSS, while building scalable defenses that support our DevOps and engineering workflows.

Requirements

• 5+ years in cybersecurity engineering, cloud security, or DevSecOps.
• Deep experience with AWS security services (IAM, KMS, VPC, Config, GuardDuty, etc.).
• Strong proficiency with Terraform and Infrastructure as Code best practices.
• Experience with Sumo Logic or equivalent log management tools.
• Familiarity with securing CI/CD and development workflows in GitHub.
• Demonstrated knowledge and practical experience implementing and maintaining compliance for SOC 2, HIPAA, and PCI DSS.
• Strong understanding of vulnerability management, threat detection, and response.

Nice To Haves

• Experience with Kubernetes security (EKS, container scanning).
• Experience writing security policies or helping with control mapping.
• Certifications such as AWS Security Specialty, CISM, CISSP, or GCPN.

Responsibilities

• Architect and enforce security best practices for AWS infrastructure, including IAM hardening, network segmentation, encryption, monitoring, and access control.
• Use Terraform to define and enforce compliant infrastructure. Maintain guardrails and reusable secure modules to support a security-by-default approach.
• Build and tune log pipelines and alerts in Sumo Logic to identify misconfigurations, anomalous behavior, and potential threats.
• Collaborate with engineering to embed security into GitHub workflows and CI/CD pipelines. Implement controls for code scanning, secrets management, and artifact integrity.
• Manage and respond to vulnerability findings across cloud, container, and application layers. Prioritize remediation based on risk and regulatory requirements.
• Implement and maintain technical controls to meet SOC 2, HIPAA, and PCI DSS requirements. Partner with Compliance and GRC teams during audits and readiness assessments.
• Assist in the development and testing of the incident response plan. Participate in threat simulations and security incident handling.
• Support security education, documentation, and enablement efforts across engineering and operations teams.

Benefits

• Health Care Plan (Medical, Dental & Vision)
• Retirement Plan (401k, IRA)
• Life Insurance (Basic, Voluntary & AD&D)
• Paid Time Off (Vacation, Sick & Public Holidays)
• Family Leave (Maternity, Paternity)
• Short Term & Long Term Disability
• Work From Home
• Stock Option Plan

What This Job Offers

• Career Level: Mid Level
• Number of Employees: 51-100 employees