Cloud Security Engineer

Overview

Who We Are

Because health is personal. That's why Personify Health created the first and only personalized health platform—bringing health plan administration, holistic wellbeing solutions, and comprehensive care navigation together in one place. We serve employers, health plans, and health systems with data-driven solutions that reduce costs while actually improving health outcomes. Together, our team is on a mission to empower people to lead healthier lives.

Learn even more about the work that drives us at personifyhealth.com.

Responsibilities

Ready To Embed Cloud Security Directly Into the Infrastructure and Pipelines That Power a Regulated Healthcare Platform?

 

Why This Role Matters

Security policy only protects members when it’s translated into automated guardrails, tuned monitoring, and practical controls that engineering teams can actually implement. This role sits inside Platform Operations — not in a separate InfoSec silo — because that’s where cloud security work gets done. You’re the subject matter expert on AWS and Azure infrastructure security, the person who responds when incidents hit platform infrastructure, and the engineer who builds the automation that makes remediation scale.

 

What You'll Actually Do

 

Define and maintain cloud security standards: Create, publish, and maintain security guidelines and reference patterns for AWS and Azure, aligned to CIS Benchmarks, AWS and Azure Well-Architected guidance, HITRUST CSF, NIST CSF, and SP 800-53.

Build and tune security monitoring: Design, implement, and continuously optimize security monitoring and logging across cloud accounts — including CloudTrail, GuardDuty, Security Hub, AWS Config, Inspector, Microsoft Defender for Cloud, CrowdStrike Falcon Complete, and SIEM integration.

Respond to platform security incidents: Lead detection, triage, containment, evidence preservation, root cause analysis, and post-incident corrective actions for infrastructure-affecting security events — coordinating with the Information Security CSIRT process.

Own TVM triage and remediation coordination: Validate findings, eliminate false positives, assign risk and priority, track remediation against SLAs, and report status across cloud infrastructure and platform services.

Drive security remediation at scale: Coordinate misconfiguration cleanup, patch campaigns, IAM right-sizing, key and secret management, and network hardening with Platform Operations teams — automating fixes through Terraform, pipelines, and policy-as-code wherever practical.

Embed security into the SDLC and CI/CD: Partner with development and DevOps teams to integrate IaC scanning, container and dependency scanning, secrets detection, and security guardrails that fail fast without blocking delivery.

Advise on architecture and design decisions: Serve as the platform security SME during architecture reviews, threat modeling, new service evaluations, and design discussions across engineering and product teams.

Support compliance and audit obligations: Partner with Information Security and Compliance on control mapping, HITRUST, SOC 2, and ISO 27001 audit evidence, risk assessments, exception documentation, and gap closure.

Apply AI and automation to security operations: Use AI-assisted tooling to accelerate alert triage, log summarization, documentation, and repetitive analysis — and surface automation opportunities within recurring security workflows.

Maintain security runbooks and playbooks: Develop and keep current the detection logic, runbooks, playbooks, and knowledge base documentation that support cloud security operations.

Participate in security on-call rotation: Share on-call and escalation responsibility for security events affecting platform infrastructure.

 

Qualifications

What You Bring to Our Team

Education & Experience

• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or a closely related field — or equivalent demonstrated experience
• 3+ years securing AWS and/or Azure environments, implementing IAM, encryption, and network controls, and managing security posture via native and third-party tools
• Hands-on experience with at least one SIEM or cloud-native security monitoring platform and at least one vulnerability management platform
• One or more current security certifications: AWS Certified Security – Specialty, CompTIA Security+, ISC2 CCSP or CISSP, or CSA CCSK
• Experience in healthcare, health plan administration, or another highly regulated environment preferred

Technical Skills

• Working knowledge of AWS security services: IAM, KMS, GuardDuty, Security Hub, Config, Inspector, WAF, Macie, VPC networking and security groups — and familiarity with Azure equivalents
• Advanced understanding of cloud network architecture including VPC and VNet design, segmentation, private connectivity, DNS, TLS, certificate management, firewalls, and zero-trust access patterns
• Strong Terraform and infrastructure-as-code proficiency — able to read, review, and submit IaC and pipeline configuration changes
• Practical understanding of Kubernetes, Docker, Linux, and Windows workloads and CI/CD toolchains
• Scripting proficiency in Python, Bash, or a comparable modern language for automation, data extraction, and reporting
• Working knowledge of NIST CSF and SP 800-53, CIS Benchmarks, HITRUST, SOC 2, and HIPAA as applied to healthcare SaaS environments
• Incident response fundamentals: log analysis, timeline reconstruction, containment decision-making, and evidence handling

Our Commitment: Personify Health is an equal opportunity employer committed to diversity, equity, inclusion, and belonging. We cultivate a work environment where differences are celebrated, and employees of all backgrounds are empowered to thrive—because diversity is core to who we are and critical to our work in health and wellbeing.

 

Stay Safe: Personify Health will never ask for payment or sensitive personal information like social security numbers during hiring. All official communication comes from verified company email addresses and or our secure applicant tracking system. Suspicious requests? Report them to [email protected]. View all legitimate openings at personifyhealth.com/careers.