Senior Cybersecurity Engineer

Impiricus•Atlanta, GA

11h•$130,000 - $175,000•Hybrid

About The Position

As a Senior Cybersecurity Engineer at Impiricus, you will lead the security vision and execution for complex, cross-product initiatives across our platform. You’ll serve as a principal contributor to the design and implementation of secure cloud infrastructure, application security, and threat detection capabilities, partnering closely with engineering, product, and leadership to protect and evolve our AI-driven healthcare engagement stack. You will shape security strategy, establish best practices, and drive high-impact security outcomes across multiple teams and domains.

Requirements

7+ years of experience in cybersecurity, application security, or cloud security roles.
Bachelor’s degree in Computer Science or a closely related technical field.
Strong hands-on experience securing production environments in AWS.
Hands-on experience with Crowdstrike.
Hands-on experience planning, executing, and reviewing penetration tests (internal and third-party), including driving remediation efforts.
Practical experience implementing, tuning, and operationalizing DAST and SAST tools within CI/CD pipelines.
Deep understanding of secure software development practices, threat modeling, and vulnerability management.
Experience supporting compliance initiatives such as SOC 2, including audit preparation, evidence collection, and coordination with internal stakeholders.
Ability to provide timely support during critical cybersecurity incidents, including occasional after-hours response when required.
Strong communication skills with the ability to translate security findings into clear, actionable guidance for engineering and leadership.

Nice To Haves

Healthcare compliance experience (e.g., HIPAA)
Distributed team experience

Responsibilities

Own and lead Impiricus’s security architecture across AWS, including identity, network security, data protection, and secure cloud-native services.
Serve as the primary owner of SOC 2 compliance, including control design, evidence collection, audit coordination, and continuous improvement of the control environment.
Design and implement application and infrastructure security controls across the SDLC, partnering with engineering teams to embed security by design.
Lead threat modeling, risk assessments, and security reviews for new products, features, and cross-platform initiatives.
Build and operate detection and response capabilities, including logging, monitoring, alerting, and incident response processes in AWS.
Define and enforce security standards, policies, and best practices, balancing strong security posture with developer velocity.
Partner with product, legal, and leadership to translate regulatory, customer, and business requirements into actionable security initiatives.
Mentor engineers and act as a security thought leader across the organization, raising the overall security maturity and culture.