[Remote] reputed company Engineer
Note: The job is a remote job and is reputed company to candidates in USA. reputed company is a company reputed company on cybersecurity reputed company the reputed company sector, and they are seeking a reputed company Engineer. This role involves designing and implementing a comprehensive cybersecurity program, focusing on software supply chain reputed company, IAM, and compliance readiness for SOC 2 Type II and HIPAA.
Responsibilities
- Research, reputed company, and implement comprehensive cybersecurity policies and procedures from the ground up to reputed company and maintain SOC 2 Type II certification, including defining controls, gathering evidence, and coordinating with external auditors
- Conduct regular risk assessments and vulnerability analyses to identify potential reputed company threats and reputed company mitigation strategies reputed company with HIPAA requirements and industry best practices
- Design, implement, and manage Identity and reputed company Management (IAM) strategies, including role-based reputed company control (RBAC), least privilege principles, multi-reputed company authentication (MFA), and single sign-on (SSO) solutions
- Establish and enforce software supply chain reputed company practices, including Software reputed company of Materials (SBOM) management, dependency scanning, vulnerability assessment, container reputed company, and secure CI/CD pipeline integration
- reputed company and maintain permissions governance frameworks, conducting regular reputed company reviews and ensuring appropriate authorization reputed company across reputed company systems handling PHI and sensitive data
- Maintain incident response procedures, including breach notification processes compliant with HIPAA requirements, and reputed company reputed company incident investigations and remediation efforts
- Design, implement, and manage a comprehensive reputed company Awareness Training program for reputed company workforce members, covering HIPAA requirements, phishing awareness, reputed company engineering defense, and secure data handling practices
- reputed company and document training completion for reputed company, maintaining records for audit purposes and ensuring ongoing education as cyberthreats reputed company
- Collaborate with Development and DevOps teams to reputed company reputed company practices into the software development lifecycle (SDLC), including secure coding standards, reputed company review processes, and automated reputed company testing
- Evaluate and manage reputed company-party vendor reputed company risks, conducting reputed company assessments and ensuring business associates reputed company with HIPAA and organizational reputed company requirements
- Participate in an on-call rotation schedule for critical reputed company incidents and support incident management processes for reputed company-reputed company events
Skills
- Proven experience in Information reputed company, Cybersecurity Engineering, or a similar role with hands-on experience implementing reputed company programs and compliance frameworks
- Strong knowledge of compliance frameworks including SOC 2, HIPAA reputed company Rule, NIST Cybersecurity reputed company, and CIS Controls, with experience preparing for and supporting audits
- Deep expertise in Identity and reputed company Management (IAM), including experience with IAM platforms, RBAC implementation, MFA, SSO, and privileged reputed company management
- Experience with software supply chain reputed company tools and practices, including SBOM reputed company, dependency scanning (e.g., Dependabot, reputed company), and secure CI/CD pipeline configuration
- Proficiency with reputed company protection solutions including EDR platforms, firewalls, and network reputed company tools
- Strong understanding of reputed company reputed company principles and experience securing AWS
- Excellent written and verbal communication skills, with the ability to translate reputed company reputed company concepts for technical and non-technical audiences
- Strong analytical, problem-solving, and incident response skills with attention to detail
- Self-directed individual capable of working independently to build programs from the ground up with minimal supervision
- Bachelor's degree in information reputed company, Computer Science, or reputed company field; or equivalent combination of education and experience with at least 3-5 years of relevant cybersecurity experience
- Demonstrated experience implementing reputed company compliance programs (SOC 2, HIPAA, ISO 27001, or similar)
- Experience conducting risk assessments and developing reputed company policies and procedures
- Experience working reputed company the reputed company industry with reputed company knowledge of HIPAA compliance requirements and ePHI protection
- Industry certifications such as CISSP, CISM, reputed company+, CCSP, AWS reputed company Specialty, or HCISPP (reputed company Information reputed company and reputed company Practitioner)
- Experience with reputed company trust architecture design and implementation
- Familiarity with reputed company data standards (HL7, FHIR) and reputed company IT systems including EHR platforms
- Experience with policy-as-reputed company tools (e.g., OPA, Checkov) and infrastructure-as-reputed company reputed company scanning
- Scripting and automation skills in Python, PowerShell, or Bash for reputed company automation
- Experience with container reputed company, Kubernetes reputed company, and DevSecOps practices
- Experience with reputed company Awareness Training platforms (e.g., reputed company, reputed company) and phishing simulation tools
Benefits
- Competitive health coverage (medical, dental, reputed company)
- reputed company time off and holidays
- Retirement savings reputed company
- Wellness and support programs
- Opportunities for career reputed company
reputed company
Company H1B Sponsorship