Security Engineer III

Aspirion

Security Engineer III designing and implementing security controls in AWS and Kubernetes environments. Joining Aspirion to shape the future of healthcare operations with a results-driven team.

Posted 5/15/2026full-timeRemote • North Carolina • 🇺🇸 United StatesMid-LevelSenior💰 $150,000 per yearWebsite

Tech Stack

Tools & technologies

AWSCloudCyber SecurityJenkinsKubernetesPythonSDLCTerraform

About the role

Key responsibilities & impact

Own cloud security engineering for AWS by defining guardrails and configuration baselines (e.g., IAM least privilege, network segmentation, encryption, logging), partnering on implementation, and driving remediation of cloud posture findings to closure.
Engineer security controls and governance for Kubernetes and containerized workloads (e.g., EKS): define and enforce admission policies, Pod Security standards, network policies, image governance, runtime protections, and secrets management patterns; partner with platform teams on implementation within clusters and supporting IAM.
Drive secure SDLC controls and engineering governance: integrate and operate scanning and policy gates for application code (SAST), dependencies (SCA), secrets, containers/images, and Infrastructure as Code (IaC); define practical remediation SLAs and exception/waiver workflows aligned to risk.
Define security policies, standards, and best practices for cloud and containerized environments, and translate them into implementable guardrails and reference patterns (policy-as-code, reference configurations, and developer guidance), including encryption/key management (e.g., KMS), secrets storage, and secure workload access patterns; validate adoption and baseline compliance in partnership with Infrastructure/Platform teams.
Partner with Compliance to align technical controls to HIPAA requirements and produce audit-ready evidence (configurations, screenshots/exports, control narratives, and remediation tracking) for cloud and container platforms.
Improve security visibility and detection in AWS and Kubernetes: define requirements, ensure high-quality logging, and create actionable detections/alerts in partnership with the SOC/SIEM owners.
Run vulnerability management across the stack for cloud and containerized applications: triage and prioritize findings for application code, Infrastructure as Code, container images, third-party dependencies, and OS packages; coordinate fixes with engineering/platform teams, validate remediation, and track risk-based exceptions.
Support incident response for cloud and container security events: perform technical triage, containment support, root cause analysis, and deliver preventative engineering changes.
Develop and maintain security-as-code standards and reusable guardrails (e.g., Terraform modules/policies) and automated checks/policy gates to enforce baseline compliance across AWS accounts and Kubernetes clusters; partner with Infrastructure/Platform teams to roll out and operationalize these controls at scale.
Independently manage security engineering deliverables from intake through delivery: clarify requirements, design solutions, document decisions/runbooks, and communicate status/risks to stakeholders.
Translate HITRUST MyCSF/HIPAA and internal security policies into measurable cloud and SDLC control requirements; validate control effectiveness through testing and evidence collection.
Contribute to security tool administration and continuous improvement (e.g., cloud posture management, vulnerability scanning, CI/CD scanning tools) by tuning rules, reducing false positives, and improving developer usability.
Participate in on-call/escalation processes as needed; maintain runbooks and support post-incident reviews and corrective actions.
Serve as a technical resource for peers through code/config reviews, pairing, and clear documentation; help raise the security bar through pragmatic standards and guidance.
Perform other duties as assigned.

Requirements

What you’ll need

5+ years in security engineering, cloud infrastructure, DevOps, or related technical roles, with significant hands-on responsibility securing production AWS environments.
Demonstrated experience implementing and improving cloud security posture (guardrails, standards, continuous compliance, vulnerability management) with measurable remediation outcomes.
Strong AWS IAM skills (roles/policies, least privilege design, identity federation, service roles) and experience implementing secure access patterns for humans and workloads.
Hands-on Kubernetes/container security experience, including implementing secure cluster/workload configuration and image governance in a production containerized environment.
Experience implementing and evidencing security controls in regulated environments (HIPAA required), including encryption/key management, logging retention, and change/audit trails.
Experience supporting incident response for cloud/workload security events, including investigation support, containment actions, and post-incident remediation.
Automation and IaC experience (e.g., Python/Bash; Terraform) and familiarity with implementing policy-as-code and continuous compliance checks.
Experience assessing and improving security for application code and IaC (e.g., Terraform/CloudFormation/Kubernetes manifests), including code review support, scanning, and remediation guidance.
Experience managing container security vulnerabilities end-to-end, including image scanning, base image/OS package patching strategies, rebuild processes, and validation of remediations in deployment pipelines.
Demonstrated experience implementing secure SDLC controls in CI/CD (e.g., GitHub Actions/Jenkins/GitLab), including SAST/SCA, container image scanning, secrets scanning, pipeline gates, and actionable remediation workflows.
Experience operating in regulated environments (HIPAA required); familiarity with NIST and/or HITRUST is strongly preferred.
Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or related field preferred (or equivalent practical experience).
Security and cloud certifications preferred: AWS Certified Security – Specialty or AWS Solutions Architect, Certified Kubernetes Security Specialist (CKS) or equivalent, and/or CISSP/CCSP (or ability to obtain within an agreed timeframe).

Benefits

Comp & perks

🌐 Worldwide ❌ Jobs You've Hidden ⭐️ Saved Jobs ✅ Applied Jobs ✉️ Email Alerts 👤 Account Aspirion Website LinkedIn All Job Openings 1001 - 5000 employees Founded 2006 ⚕️ Healthcare Insurance 🤖 Artificial Intelligence ☁️ SaaS 💰 Series unknown on 2012-02 Healthcare Insurance
Artificial Intelligence
SaaS Aspirion is a healthcare revenue cycle management company that helps hospitals recover revenue from denied and complex claims. The company deploys AI automation and a proprietary Compass platform, staffed with US-based attorneys, clinicians, and AI engineers, to overturn clinical denials, maximize out-of-network reimbursement, perform zero-balance reviews, and recover payment variances across services such as denials management, AR management, complex claims, motor vehicle accidents, workers' compensation, TRICARE, and out-of-state Medicaid. Aspirion emphasizes measurable recovery impact (over $6 billion captured), increased collections for clients, HITRUST certification, Best in KLAS awards, and partnerships with large health systems. Security Engineer III 🔥 1 minute ago 🌲 North Carolina – Remote 💵 $150k / year ⏰ Full Time 🟡 Mid-level 🟠 Senior 👮‍♂️ Cybersecurity / Security Engineer AWS Cloud Cyber Security Jenkins Kubernetes Python SDLC Terraform Apply Now Find Hiring Managers Customize resume + cover letter Report problem ☆ Save ☑️ Mark as applied ❌ Hide 📋 Description
Own cloud security engineering for AWS by defining guardrails and configuration baselines (e.g., IAM least privilege, network segmentation, encryption, logging), partnering on implementation, and driving remediation of cloud posture findings to closure.
Engineer security controls and governance for Kubernetes and containerized workloads (e.g., EKS): define and enforce admission policies, Pod Security standards, network policies, image governance, runtime protections, and secrets management patterns; partner with platform teams on implementation within clusters and supporting IAM.
Drive secure SDLC controls and engineering governance: integrate and operate scanning and policy gates for application code (SAST), dependencies (SCA), secrets, containers/images, and Infrastructure as Code (IaC); define practical remediation SLAs and exception/waiver workflows aligned to risk.
Define security policies, standards, and best practices for cloud and containerized environments, and translate them into implementable guardrails and reference patterns (policy-as-code, reference configurations, and developer guidance), including encryption/key management (e.g., KMS), secrets storage, and secure workload access patterns; validate adoption and baseline compliance in partnership with Infrastructure/Platform teams.
Partner with Compliance to align technical controls to HIPAA requirements and produce audit-ready evidence (configurations, screenshots/exports, control narratives, and remediation tracking) for cloud and container platforms.
Improve security visibility and detection in AWS and Kubernetes: define requirements, ensure high-quality logging, and create actionable detections/alerts in partnership with the SOC/SIEM owners.
Run vulnerability management across the stack for cloud and containerized applications: triage and prioritize findings for application code, Infrastructure as Code, container images, third-party dependencies, and OS packages; coordinate fixes with engineering/platform teams, validate remediation, and track risk-based exceptions.
Support incident response for cloud and container security events: perform technical triage, containment support, root cause analysis, and deliver preventative engineering changes.
Develop and maintain security-as-code standards and reusable guardrails (e.g., Terraform modules/policies) and automated checks/policy gates to enforce baseline compliance across AWS accounts and Kubernetes clusters; partner with Infrastructure/Platform teams to roll out and operationalize these controls at scale.
Independently manage security engineering deliverables from intake through delivery: clarify requirements, design solutions, document decisions/runbooks, and communicate status/risks to stakeholders.
Translate HITRUST MyCSF/HIPAA and internal security policies into measurable cloud and SDLC control requirements; validate control effectiveness through testing and evidence collection.
Contribute to security tool administration and continuous improvement (e.g., cloud posture management, vulnerability scanning, CI/CD scanning tools) by tuning rules, reducing false positives, and improving developer usability.
Participate in on-call/escalation processes as needed; maintain runbooks and support post-incident reviews and corrective actions.
Serve as a technical resource for peers through code/config reviews, pairing, and clear documentation; help raise the security bar through pragmatic standards and guidance.
Perform other duties as assigned. 🎯 Requirements
5+ years in security engineering, cloud infrastructure, DevOps, or related technical roles, with significant hands-on responsibility securing production AWS environments.
Demonstrated experience implementing and improving cloud security posture (guardrails, standards, continuous compliance, vulnerability management) with measurable remediation outcomes.
Strong AWS IAM skills (roles/policies, least privilege design, identity federation, service roles) and experience implementing secure access patterns for humans and workloads.
Hands-on Kubernetes/container security experience, including implementing secure cluster/workload configuration and image governance in a production containerized environment.
Experience implementing and evidencing security controls in regulated environments (HIPAA required), including encryption/key management, logging retention, and change/audit trails.
Experience supporting incident response for cloud/workload security events, including investigation support, containment actions, and post-incident remediation.
Automation and IaC experience (e.g., Python/Bash; Terraform) and familiarity with implementing policy-as-code and continuous compliance checks.
Experience assessing and improving security for application code and IaC (e.g., Terraform/CloudFormation/Kubernetes manifests), including code review support, scanning, and remediation guidance.
Experience managing container security vulnerabilities end-to-end, including image scanning, base image/OS package patching strategies, rebuild processes, and validation of remediations in deployment pipelines.
Demonstrated experience implementing secure SDLC controls in CI/CD (e.g., GitHub Actions/Jenkins/GitLab), including SAST/SCA, container image scanning, secrets scanning, pipeline gates, and actionable remediation workflows.
Experience operating in regulated environments (HIPAA required); familiarity with NIST and/or HITRUST is strongly preferred.
Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or related field preferred (or equivalent practical experience).
Security and cloud certifications preferred: AWS Certified Security – Specialty or AWS Solutions Architect, Certified Kubernetes Security Specialist (CKS) or equivalent, and/or CISSP/CCSP (or ability to obtain within an agreed timeframe). Apply Now 📊 Check your resume score for this job Improve your chances of getting an interview by checking your resume score before you apply. Check Resume Score Similar Jobs Senior Technical Account Manager, Security 🔥 35 minutes ago Akamai Technologies 5001 - 10000 🔒 Cybersecurity Website LinkedIn All Job Openings Senior Technical Account Manager responsible for API Security solutions at Akamai. Engaging with large enterprise customers to ensure effective implementations and drive impactful results. 🇺🇸 United States – Remote 💵 $112.5k - $202.5k / year 💰 Post-IPO Equity on 2001-07 ⏰ Full Time 🟠 Senior 👮‍♂️ Cybersecurity / Security Engineer 🦅 H1B Visa Sponsor Cloud Cyber Security Exam Security Specialist 🔥 40 minutes ago Brookaire Company 51 - 200 🛒 Retail 🚗 Transport Website LinkedIn All Job Openings Exam Security Specialist responsible for maintaining the integrity of CFA Institute exams. Review incidents, support investigations, and manage security-related policies and processes to ensure exam security. 🇺🇸 United States – Remote 💵 $70k - $80k / year ⏰ Full Time 🟡 Mid-level 🟠 Senior 👮‍♂️ Cybersecurity / Security Engineer Cybersecurity Engineer – Zscaler SME 🔥 44 minutes ago Envision Healthcare 10,000+ employees 👥 B2C 🤝 B2B Website LinkedIn All Job Openings Cybersecurity Engineer implementing Zscaler Private Access solutions for Envision, a national medical group. Collaborating with teams to optimize secure remote access for a global workforce. 🇺🇸 United States – Remote ⏰ Full Time 🟡 Mid-level 🟠 Senior 👮‍♂️ Cybersecurity / Security Engineer 🦅 H1B Visa Sponsor Azure Cyber Security DNS Firewalls Python OT/IT Cyber Security Engineer V 🔥 2 hours ago X-energy 201 - 500 ⚡ Energy 🚀 Aerospace 🔬 Science Website LinkedIn All Job Openings Cyber Security Engineer developing and executing cyber security strategies for plant technology systems. Integrating security into design, threat hunting, and system assessments. 🇺🇸 United States – Remote 💵 $180k - $205k / year ⏰ Full Time 🟠 Senior 🔴 Lead 👮‍♂️ Cybersecurity / Security Engineer 🦅 H1B Visa Sponsor Angular AWS Azure Cloud Cyber Security Docker JavaScript Kubernetes ServiceNow Cloud Security Engineer 🔥 3 hours ago Polymarket 11 - 50 ₿ Crypto 🎲 Gambling 💸 Finance Website LinkedIn All Job Openings Cloud Security Engineer at Polymarket enhancing AWS security posture across diverse functions. Collaborating with engineering to implement security controls and reduce risks effectively. 🇺🇸 United States – Remote 💵 $180k - $250k / year ⏰ Full Time 🟡 Mid-level 🟠 Senior 👮‍♂️ Cybersecurity / Security Engineer AWS Cloud Python Terraform TypeScript Web3 Go View More Security Engineer Jobs 🌐 Worldwide Built by Lior Neu-ner. I'd love to hear your feedback — Get in touch via DM or support@remoterocketship.com Search Search Jobs by country Search jobs by city Search jobs by job title Search entry-level jobs Search junior-level jobs Search senior-level jobs Search jobs by tech stack Search jobs by contract type Search remote internships Search remote part-time jobs Remote jobs Anywhere in the World Companies Hiring Anywhere in the World Companies Hiring Sales People Anywhere in the World Companies Hiring Software Engineers Anywhere in the World Resources Advice Tips for finding remote jobs Interview questions and answers Resume examples Cover letter examples Post a job Affiliates Privacy policy Terms of service Job board SEO course AI Apply Copilot OpenClaw job finder Jobs by Country Remote jobs anywhere in the world (Worldwide remote jobs) Remote jobs United States Remote jobs Australia Remote jobs Brazil Remote jobs Canada Remote jobs France Remote jobs Ireland Remote jobs Germany Remote jobs Netherlands Remote jobs Spain Remote jobs UK Popular Jobs Remote data analyst jobs Remote customer support jobs Remote executive assistant jobs Remote marketing jobs Remote product designer jobs Remote product manager jobs Remote project manager jobs Remote recruiter jobs Remote sales jobs Remote software engineer jobs Jobs by Type Remote full-time jobs Remote part-time jobs Remote contract jobs Remote internship jobs Remote entry-level jobs Remote jobs with no experience required Remote junior jobs (1-3 years of experience) Digital nomad jobs Remote jobs with no degree required Freelance remote jobs Temporary remote jobs Remote jobs hiring now Stay at home mom jobs

ATS Keywords

✓ Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools

cloud security engineeringAWSKubernetesIAMvulnerability managementInfrastructure as CodeTerraformPythonBashsecure SDLC

Soft Skills

incident responsecommunicationstakeholder managementtechnical triageroot cause analysiscollaborationdocumentationproblem-solvingcontinuous improvementmentoring

Certifications

AWS Certified Security – SpecialtyAWS Solutions ArchitectCertified Kubernetes Security SpecialistCISSPCCSP