Cloud Engineer, Security
Quick Summary
The Staff Cloud Security Engineer is a critical, hands-on technical role responsible for engineering, implementing, and automating robust security controls within our cloud environments (AWS primarily, with GCP considerations).
At Included Health, security is central to the trust our members, customers, partners, and care teams place in us. We protect sensitive health information and the systems that support our products by building security into architecture, engineering practices, and day-to-day operations.
Our Security Engineering team works closely with platform engineering and product teams to build practical, scalable security controls, especially focused on our infrastructure-as-code. We focus on reducing risk through automation, secure-by-default patterns, strong technical partnerships, and controls that teams can operate in real production environments.
As a Cloud Engineer on the Security team, you’ll help mature Included Health’s cloud security posture across primarily AWS environments, with consideration for GCP. You’ll design, implement, and automate controls that protect product infrastructure and help prevent unauthorized Protected Health Information (PHI) exfiltration.
This is a full-time, remote role reporting to the Senior Manager, Security Engineering. We are open to considering candidates at both the Senior and Staff levels.
The role requires hands-on technical execution as well as the ability to influence infrastructure, DevOps, engineering, and product teams.
You are a practical, hands-on cloud security engineer who can bring structure to ambiguous risks or control gaps without waiting for perfect clarity. You clarify the desired outcome, trust boundaries, stakeholders, constraints, and available facts, then make a reasonable first move and adapt as you learn.
You are comfortable going deep in code, cloud APIs, logs, identity policies, network traffic, CI/CD pipelines, and infrastructure configuration. You use evidence to test hypotheses and turn findings into durable fixes, reusable automation, clear documentation, or repeatable processes.
You build trust through preparation, responsiveness, direct communication, technical credibility, and follow-through. You listen to operational realities, explaining risks and tradeoffs clearly, and work with teams toward practical controls they can operate in production.
You take ownership through the full loop: coordination, escalation, validation, closure, and knowledge sharing. You know when to investigate independently, when to involve the right expertise, and when broader organizational alignment is needed.
The United States new hire base salary target ranges for this full-time position are:
- Zone A: $130,050–$249,930 + equity + benefits
- Zone B: $143,055–$274,923 + equity + benefits
- Zone C: $156,060–$299,616 + equity + benefits
- Zone D: $169,065–$324,909 + equity + benefits
Location & Eligibility
About this job
- Pay per year
- $130,050–$249,930 a year
- 7% above the $177,500 median for Devops Engineer jobs on Jobera (944 salaries).
- Posted
- 378 days ago
Listing Details
- Posted
- October 6, 2025
- First seen
- March 26, 2026
- Last seen
- October 19, 2026
Posting Health
- Days active
- 206
- Repost count
- 0
- Trust Level
- 43%
- Scored at
- October 19, 2026
Signal breakdown
4 other jobs at
View all →Browse Similar Jobs
Stay ahead of the market
Get the latest job openings, salary trends, and hiring insights delivered to your inbox every week.
No spam. Unsubscribe at any time.