Security Engineer

• Serve as the primary administrator for Vanta.
• You will manage continuous compliance monitoring daily, triage failing tests, automate evidence collection, and ensure our security posture remains audit-ready year-round.
• Own the relationships with third-party security vendors.
• You will hold vendors accountable to SLAs, ensure they deliver high-quality work, and conduct security reviews for new software procurement.
• Serve as the primary point of contact for audits.
• Maintain our ISO 27001 certification and lead the hands-on implementation for future compliance initiatives such as SOC 2 Type II and HITRUST.
• Partner directly with Software Engineering and DevOps to configure cloud security controls in AWS, review Infrastructure as Code, and integrate security tools into the SDLC.
• Manage day-to-day security operations, including vulnerability management, incident response, and access control reviews.
• Act as a subject matter expert internal business units, helping them understand and navigate security requirements in government and healthcare contracts.
• Partner closely with the IT Support team to design and validate secure configuration standards for laptops and mobile devices.

Head of Security and Compliance

Senior Security Engineer

Cloud Information Systems Security Officer, Hybrid, DHS

Facility Security Officer

Cybersecurity Architect

Senior Manager, IT Security & Compliance