Senior Cloud Security Engineer

We are seeking an experienced cloud security professional to strengthen the security, resilience, and compliance of modern cloud-based healthcare platforms. In this role, you will lead the design and continuous improvement of secure AWS environments while protecting sensitive patient information and supporting advanced AI-driven technologies. You will establish security architectures, implement Zero Trust principles, and integrate automated controls across cloud infrastructure and software delivery pipelines. Working closely with engineering, data science, compliance, and enterprise technology teams, you will address emerging risks associated with machine learning, generative AI, and autonomous AI systems. You will also drive threat detection, incident response, and regulatory readiness while mentoring colleagues and promoting security best practices. This is an opportunity to make a meaningful impact at the intersection of healthcare innovation, cloud engineering, and next-generation AI security in a remote-friendly environment.

• Education: Bachelor's degree in Cybersecurity, Computer Science, Information Systems, or a related field, or equivalent practical experience. A master's degree in a relevant discipline is desirable.

• Professional experience: At least five years of experience in cloud security or cybersecurity engineering, with hands-on responsibility for designing, implementing, and improving security controls.

• AWS expertise: Strong practical experience securing AWS services and applying cloud security principles across identity management, networking, encryption, logging, and infrastructure protection.

• Cloud-native security: Solid understanding of containerized environments, including Kubernetes and Docker, as well as serverless architectures and cloud-native application security.

• Regulated environments: Strong knowledge of security and compliance requirements in regulated industries, particularly HIPAA, HITRUST, and SOC 2.

• Zero Trust architecture: Experience implementing Zero Trust principles across cloud infrastructure, endpoints, identity, and access controls.

• AI security knowledge: Experience identifying and mitigating security risks associated with AI technologies, including machine learning, generative AI, and emerging autonomous AI systems.

• DevSecOps and automation: Demonstrated ability to automate security controls and integrate security testing into CI/CD pipelines and infrastructure-as-code workflows.

• Programming and scripting: Proficiency in at least one programming or scripting language, with familiarity with Python, Java, Node.js, or C#.

• Application security testing: Hands-on experience with SAST, DAST, and SCA tools, along with an understanding of how AI-assisted coding tools affect software security.

• Security monitoring and response: Knowledge of cloud security monitoring, threat detection, vulnerability remediation, and incident response processes.

• Security certifications: CISSP, CCSP, AWS security certifications, or comparable credentials are highly desirable.

• Technical leadership: Ability to guide and influence engineers, security analysts, and other technical professionals without necessarily having direct managerial authority.

• Communication and collaboration: Strong interpersonal and communication skills, with the ability to explain complex security issues and collaborate effectively across technical and business teams.

• Problem-solving and adaptability: Strong organizational skills, sound judgment, prioritization, motivation, and the ability to respond effectively to evolving security challenges.

• Travel availability: Willingness to travel occasionally to the organization's Tennessee offices for training.

• Work authorization: Must already be authorized to work in the United States on a full-time, permanent basis without requiring current or future visa sponsorship.

• Pre-employment screening: Successful completion of a background check is required due to access to sensitive information, including proprietary data and protected health information.