Security-Engineer, Cloud-Security-Engineer, Application-Security-Engineer Jobs

About the Company

At Rezilient, we’re redefining what primary care looks like, making it more accessible, seamless, and patient-centered than ever before. Through our innovative CloudClinic model, we combine virtual provider visits with smart, tech-enabled infrastructure to deliver timely, personalized care. By removing traditional barriers to access and continuously expanding our specialty offerings, we’re building a healthcare experience that’s as convenient as it is comprehensive.

About the Role

Rezilient is seeking a Senior Security Engineer to serve as a hands-on, senior individual contributor supporting our information security programs. This role is responsible for protecting the systems, data, and infrastructure that power Rezilient’s CloudClinic model, with a particular focus on safeguarding protected health information (PHI) and personally identifiable information (PII) across our cloud platform, clinical environments, and corporate systems.

You will design, build, and operate the technical security controls that keep Rezilient secure, from cloud and application security to identity and access management, endpoint protection, detection, and incident response. Working closely with Engineering, Product, IT, Clinical Operations, and our Security & Compliance team, you will embed security into how we build and run our platform, and provide the technical evidence and expertise that support frameworks such as SOC 2, HIPAA/HITECH, and HITRUST.

This is a senior IC role for an engineer who can move comfortably between architecture and execution. The ideal candidate brings deep technical expertise, sound judgment, and the ability to translate security needs into practical solutions that enable a fast-moving healthcare technology company to grow safely.

Key Responsibilities

Cloud & Infrastructure Security

• Design, implement, and maintain security controls across Rezilient’s cloud infrastructure, including network security, encryption, secrets management, logging, and configuration hardening.
• Build and manage security guardrails using infrastructure as code, cloud-native security tools, and automated policy enforcement.
• Continuously assess cloud environments for misconfigurations, excessive permissions, and exposure risks, and drive remediation with Engineering.
• Ensure PHI and PII are protected at rest and in transit, with appropriate data classification, access restrictions, and retention controls.

Application & Product Security

• Partner with Product and Engineering to embed security into the software development lifecycle, from design through release.
• Lead threat modeling and security design reviews for new features, integrations, infrastructure, and architecture decisions.
• Own application security tooling and processes, including static and dynamic analysis, dependency and container scanning, and secure code review.
• Establish secure development standards and coach engineers on secure coding practices and common vulnerability classes.
• Assess the security of third-party integrations, APIs, and EHR and partner data exchanges that handle patient data.

Identity, Access & Endpoint Security

• Partner with IT to design and enforce identity and access management controls, including SSO, MFA, role-based access, least privilege, and access reviews.

Detection, Response & Vulnerability Management

• Build and tune security monitoring, logging, and alerting to detect suspicious activity across cloud, application, identity, and endpoint layers.
• Serve as a technical lead during security incidents, coordinating investigation, containment, eradication, recovery, and post-incident review.
• Develop and maintain incident response runbooks and lead tabletop exercises with cross-functional teams.
• Own the vulnerability management program, including scanning, prioritization, remediation tracking, and coordination of penetration tests.
• Monitor the threat landscape relevant to healthcare and cloud environments and proactively adapt defenses.

Security Governance & Compliance Support

• Produce evidence for technical controls for SOC 2, HIPAA/HITECH, HITRUST, and related frameworks.
• Support audits, risk assessments, and remediation efforts with technical expertise, documentation, and control testing.
• Contribute to security policies, standards, and procedures, ensuring they are technically sound and practical to operate.

Technical Leadership & Security Culture

• Act as a trusted security advisor to Engineering, Product, IT, and leadership, translating technical risk into clear business impact and recommendations.
• Automate security processes and reduce manual work through scripting, tooling, and integration.
• Contribute to security awareness efforts with practical, role-specific guidance for engineers and staff.
• Help shape the long-term information security roadmap and mentor team members as the security function grows.

Requirements

• Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, or a related field, or equivalent practical experience.
• 5+ years of experience in information security, security engineering, or a closely related technical role, ideally in healthcare, digital health, or SaaS/cloud environments.
• Deep hands-on experience securing AWS cloud environments, including IAM, networking, encryption, logging, and cloud-native security services.
• Strong background in application security, including threat modeling, secure code review, and security testing tools within CI/CD pipelines.
• Experience with identity and access management, endpoint security, and security monitoring or SIEM tools.
• Proven experience leading or supporting incident response and vulnerability management programs.
• Working knowledge of security and compliance frameworks such as SOC 2, HIPAA/HITECH, HITRUST, ISO 27001/27002, or NIST CSF, and experience providing technical evidence for audits.
• Proficiency in scripting or programming (e.g., Python, Go, or Bash) and experience with infrastructure as code (e.g., Terraform).
• Excellent communication skills, with the ability to explain technical risks to both technical and non-technical audiences.
• Comfort operating as a senior individual contributor in a fast-moving startup environment with broad ownership.
• Experience protecting PHI or other regulated data is strongly preferred.
• Relevant certifications such as CISSP, CCSP, OSCP, GIAC (e.g., GCIH, GCLD, GWAPT), or cloud security certifications are a plus.

Benefits

At Rezilient Health, we're on a mission to make humane healthcare truly abundant, and we invest in the people who make that possible. This is a high-impact role where your ideas directly shape how care is delivered, within a supportive, collaborative, and diverse team that believes healthcare is fundamentally a human experience. We back that commitment with a robust total rewards package:

• Meaningful ownership through stock options, allowing you to share directly in the value you help create as we grow
• Competitive base compensation
• Comprehensive medical, dental, and vision coverage options, with Rezilient contributing toward your premiums
• Complimentary access to Rezilient's clinical programs for you and your household members, the same connected care we deliver to our patients
• 401(k) retirement plan to support your long-term financial well-being
• Flexible Paid Time Off, so you can recharge without counting days
• Dedicated Paid Sick Leave, separate from your FTO, for when health needs come first
• 11 paid company holidays each year
• Paid family leave to support you through life's biggest moments
• Optional ancillary benefits, including life insurance, disability coverage, and a Health Savings Account (HSA)

Originally posted on Himalayas

The big picture: Axios is a respected media company dedicated to providing trustworthy, award-winning news content in an audience-first format known as Smart Brevity™. We are looking for a Senior Security Engineer with strong cloud infrastructure and AI security experience to lead our defensive posture, drive threat modeling and vulnerability management, and embed security controls - including AI-driven defense and monitoring - across our platform and automation pipelines.

Why it matters: As a Senior Security Engineer at Axios, you will architect and implement proactive security strategies to protect our audience, platform, and data assets against evolving threat vectors, including AI-driven attacks. In this role, you will define our security roadmap, leverage internal and third-party AI defense tools, and ensure our cloud systems remain resilient, secure by default, and capable of automated threat detection and response.

Responsibilities:

• Lead the architectural design and implementation of security controls across cloud infrastructure, platform services, and AI integrations.
• Drive vulnerability management, threat modeling, incident response, and proactive security assessments across AWS, Kubernetes, and AI application environments.
• Shape, maintain, and execute the company’s long-term security roadmap in close alignment with engineering and executive leadership.
• Embed automated security testing, SAST/DAST, and AI-driven compliance checks directly into CI/CD pipelines and infrastructure-as-code workflows.
• Oversee identity and access management (IAM), secrets management, encryption protocols, and zero-trust architecture standards.
• Evaluate, deploy, and maintain internal AI security tools and modern third-party defensive solutions to detect, mitigate, and respond to AI-driven threats and sophisticated attack vectors in real time.
• Promote a strong security culture across engineering by conducting threat modeling workshops and coaching teams on secure coding and infrastructure practices.
• Partner with product, infrastructure, data, and QE teams to ensure security is integrated seamlessly into every stage of the development lifecycle.

Skills:

• Deep expertise in cloud and application security, including threat modeling, vulnerability scanning, penetration testing, IAM, secrets management, AI security, and compliance frameworks.
• Strong working knowledge of AWS infrastructure and security controls (IAM, KMS, EKS, RDS, S3).
• Experience hardening Kubernetes clusters, runtime security, container scanning, and network policy enforcement.
• Proficiency in integrating SAST/DAST and security automation into CI/CD pipelines (GitHub Actions).
• Solid scripting or programming skills in Python, Go, or Bash for security tooling and automated remediation.
• Hands-on experience with SIEM, security logging, automated threat intelligence, and AI-powered monitoring frameworks (Prometheus, Grafana, Loki, or modern SOC tooling).
• Demonstrated leadership in driving security initiatives, defining policy, and guiding engineering teams on security risk.
• Exceptional communication and stakeholder management skills, with the ability to effectively balance security requirements and business agility.

What success looks like:

• Security & Compliance: Focused on proactive security initiatives, including automated vulnerability scans, implementation of controls, remediation, and contributions to the long-term security roadmap.
• Cloud Security Architecture: Hardened, reviewed, and optimized AWS and Kubernetes infrastructure security to meet strict compliance, resilience, and least-privilege access standards.
• DevSecOps & Automation: Integrated automated security scans, secret detection, and vulnerability gates seamlessly into CI/CD pipelines without disrupting developer velocity.
• Security Tooling Adoption: Evaluated, piloted, and deployed advanced security and defensive AI tools that measurably enhanced threat detection speed and reduced exposure risk.
• Threat Detection & Response: Established robust security monitoring, SIEM alerting, and incident response playbooks to maintain real-time visibility and rapid response capabilities across all production platforms.
• Cross-Functional Security Leadership: Partnered with engineering, product, and QE teams to instill a security-first culture, conduct threat modeling workshops, and guide technical teams on risk mitigation.
• AI Defense & Security: Evaluated and deployed internal AI security tools and 3rd-party defensive solutions to proactively safeguard infrastructure, applications, and corporate assets against AI-driven threats and emerging attack vectors.

Starting salary for this role is in the range of $150,000 - $180,000 and is dependent on numerous factors, including but not limited to location, work experience, and skills. This range does not include other compensation benefits. Axios' compensation philosophy takes into account the cost of labor differentials across the country. Because this is a remote-optional job posting, this salary range takes into account all possible locations within the United States, but candidates will only be eligible for the salary range for their location.

Axios is committed to embracing artificial intelligence as a core part of how we work. All team members are expected to actively develop AI literacy and use AI tools to enhance their productivity, creativity, and efficiency. We invest in ongoing learning to ensure every employee is equipped to responsibly and effectively integrate AI into their daily workflows.

What Axios brings to the table besides salary:

• 401(k) with employer match
• Robust PPO and High Deductible health insurance options on the Blue Cross Blue Shield network
• Employer Health Savings Account (HSA) contribution for the high deductible health plan option
• Dental and vision coverage
• Primary caregiver 12-week paid leave
• Birth-givers will have an additional 6-8 weeks depending on type of delivery, for a total of 18-20 weeks continuous leave
• Generous vacation policy, plus holidays
• One mental health day per quarter
• Annual learning and development stipend
• $100 monthly work-from-home stipend
• Tele-mental health services through Headspace
• OneMedical membership, including tele-health services
• Personal health advocacy resources through HealthAdvocate
• Inclusive fertility, hormonal health and family forming benefits through Carrot Fertility
• Access to the Axios Employee Support Fund, which was created to allow employees to request financial support when facing financial hardship or emergencies
• Increased work flexibility for parents and caretakers
• Virtual company-sponsored social events
• A strong and positive work environment
• A commitment to an open, inclusive, and diverse work culture

Equal Opportunity Employer Statement

Axios is an equal opportunity employer that is committed to diversity and inclusion in the workplace. We prohibit discrimination and harassment of any kind based on race, color, sex, religion, sexual orientation, age, gender identity, gender expression, veteran status, national origin, disability, genetic information, pregnancy, or any other protected characteristic as outlined by federal, state, or local laws.

This policy applies to all employment practices within our organization, including hiring, recruiting, promotion, termination, layoff, recall, leave of absence, compensation, benefits, training, and apprenticeship. Axios makes hiring decisions based solely on qualifications, merit, and business needs at the time.

Originally posted on Himalayas