Senior Security Engineer

PatientNow

About The Position

PatientNow is seeking a Senior Cybersecurity Engineer to lead and strengthen the security of our AWS based healthcare SaaS platform. This role is responsible for securing cloud infrastructure, driving PCI DSS implementation, and maintaining HIPAA and SOC 2 compliance. This is a high ownership role within a growth stage organization where the candidate will wear multiple hats, serving as cloud security architect, incident response lead, compliance partner, vulnerability management owner, and team mentor, while mentoring two Junior Security Engineers.

Requirements

Bachelor’s degree in a technical field or equivalent experience
6 to 10 years of cybersecurity experience including strong AWS cloud expertise
Hands on experience with AWS security services including GuardDuty, Security Hub, CloudTrail, Config, IAM, WAF, and Inspector
Experience with CrowdStrike, Tenable, and application security tooling such as Aikido Security
Proven PCI DSS implementation experience required
Strong knowledge of HIPAA and SOC 2 frameworks
Experience in incident response, vulnerability management, and audit support
Demonstrated leadership and mentorship experience
Ability to operate independently in a fast paced growth stage healthcare SaaS environment

Nice To Haves

Experience securing environments handling PHI preferred
AWS Certified Security Specialty, CISSP, CCSP, or similar certifications preferred

Responsibilities

Lead Cloud Security Posture Management CSPM across AWS
Architect and harden AWS infrastructure including IAM, VPC, S3, WAF, encryption, and segmentation
Monitor and respond to security events using AWS security services including GuardDuty, Security Hub, CloudTrail, AWS Config, IAM Access Analyzer, WAF, and Inspector
Administer and optimize security tooling including CrowdStrike EDR, Tenable vulnerability management, and Aikido Security for code and application security posture management
Develop and maintain incident response processes and lead forensic investigations
Own the vulnerability management lifecycle including scanning, prioritization, remediation tracking, and reporting
Drive PCI DSS implementation and support HIPAA and SOC 2 audit readiness
Conduct risk assessments and implement mitigation controls
Support Business Continuity and Disaster Recovery BC DR security initiatives
Partner cross functionally to embed security into SDLC, DevOps, SRE, and CI CD workflows
Provide oversight, mentorship, and task prioritization for two Junior Security Engineers
Review security configurations, remediation efforts, and compliance deliverables including PCI DSS controls
Lead team coordination for SOC2, HIPAA and PCI audits, evidence collection, and remediation tracking
Support performance feedback and professional development
Foster a culture of accountability, technical excellence, and regulatory compliance