Senior Cloud Security Engineer

ComPsych

Senior Cloud Security Engineer securing ComPsych’s mental health and absence-management platforms across cloud, applications, data, and AI. Building automated controls, detection, response, and privacy protections.

Posted 9/3/2026full-timeRemote • 🇺🇸 United StatesSenior💰 $150,000 - $200,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in cloud security posture management, IAM, and data protection, with a strong focus on implementing security controls as code and ensuring compliance with industry standards. Proficient in application security practices, vulnerability management, and incident response across cloud environments.

Highest-signal resume keywords

Cloud Security Expertise in AWS and AzureIAM and Least Privilege ImplementationData Protection and Privacy EngineeringVulnerability Management and Incident ResponseApplication Security and Secure SDLC

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Cloud Security Posture ManagementIAM ImplementationData ClassificationEncryptionTokenizationVulnerability ScanningPolicy as CodeThreat ModelingSecure SDLCAI Security Awareness

Soft Skills

Organizational SkillsProject Management SkillsInterpersonal SkillsCommunication SkillsAbility to Multitask

Tools & Technologies

SIEMCloud-Native DetectionWAFsCSPMCWPPCIEMAgentic AI ToolsStatic Analysis ToolsDynamic Analysis ToolsSoftware Composition Analysis

Certifications & Qualifications

Bachelor’s Degree in Computer ScienceHIPAA ComplianceHITRUST CertificationSOC 2 ComplianceNIST CertificationISO 27001 CertificationISO 42001 CertificationGDPR Compliance

Industry Keywords

Cloud SecurityApplication SecurityInformation SecurityNetwork SecurityData ProtectionPrivacy by DesignRegulated Health DataOWASP Top 10MITRE ATLASGenerative AI Security

Tech Stack

Tools & technologies

AWSAzureCloudFirewallsSDLC

About the role

Key responsibilities & impact

Own cloud security posture management across configurations, workloads, and entitlements across AWS and Azure
Design and implement IAM, least privilege, federation, SSO, secrets management, privileged access, identity controls, network segmentation, container security, encryption, key management, and policy-as-code guardrails
Shift application security left in CI/CD through static, dynamic, dependency, and software supply chain scanning, threat modeling, secrets management, and secure-by-design reviews
Design segmentation, zero-trust access, firewalls, WAFs, and traffic inspection across cloud and hybrid networks
Lead data classification, encryption, tokenization, key management, DLP, and privacy-by-design controls for PHI and ePHI
Design guardrails, data protection, abuse controls, misuse controls, and monitoring for AI, machine learning, and generative AI systems
Tune SIEM and cloud-native detections, drive event correlation and incident response, perform vulnerability scanning, and coordinate penetration testing
Turn security findings into fixes with real remediation timelines
Maintain security baselines, configuration compliance, controls, logging, and audit evidence
Coach engineers across teams and make secure practices the default
Perform other duties as assigned

Requirements

What you’ll need

Bachelor’s degree in Computer Science or a related field
6 to 9 years of security engineering experience with hands-on cloud experience, stated as a guideline rather than a hard requirement
Agentic AI tools as a primary surface for security engineering, analysis, detection, and automation
Senior-level breadth across network security, application security, cloud security, information security, and AI security, with depth in several areas
Production experience building and operating controls as code, including policy as code, infrastructure as code, automation, and detections
Experience carrying on-call and incident load
Cloud security expertise in AWS and Azure, including IAM, least privilege, identity federation, SSO, secrets management, privileged access, workload and non-human identities, network security, container security, image scanning, runtime protection, key management, encryption, CSPM, CWPP, and CIEM
Data protection and privacy engineering experience, including data classification, encryption, tokenization, key management, DLP, privacy by design for regulated health data, and data residency awareness
Application and product security experience, including secure SDLC, threat modeling, static analysis, dynamic analysis, software composition analysis, secrets security, software supply chain security, and API security
Detection, response, and vulnerability management experience, including SIEM, cloud-native detection, log and event correlation, vulnerability scanning and management, penetration testing coordination, and remediation to closure
AI security awareness covering prompt injection, data and model poisoning, and data leakage
Familiarity with OWASP Top 10 for LLM Applications and MITRE ATLAS is a plus
Experience with HIPAA, HITRUST, SOC 2, NIST, ISO 27001, ISO 42001, and GDPR frameworks
Ability to multitask and work autonomously
Excellent organizational and project management skills
Effective interpersonal and communication skills

Benefits

Comp & perks

Paid Time Off (PTO)
Medical insurance
Dental insurance
Vision insurance
401(k) with match
Robust EAP
Wellness program