Cloud Security Engineer

• →Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or a closely related field — or equivalent demonstrated experience
• →3+ years securing AWS and/or Azure environments, implementing IAM, encryption, and network controls, and managing security posture via native and third-party tools
• →Hands-on experience with at least one SIEM or cloud-native security monitoring platform and at least one vulnerability management platform
• →One or more current security certifications: AWS Certified Security – Specialty, CompTIA Security+, ISC2 CCSP or CISSP, or CSA CCSK
• →Experience in healthcare, health plan administration, or another highly regulated environment preferred

Security policy only protects members when it’s translated into automated guardrails, tuned monitoring, and practical controls that engineering teams can actually implement. This role sits inside Platform Operations — not in a separate InfoSec silo — because that’s where cloud security work gets done. You’re the subject matter expert on AWS and Azure infrastructure security, the person who responds when incidents hit platform infrastructure, and the engineer who builds the automation that makes remediation scale.

• Working knowledge of AWS security services: IAM, KMS, GuardDuty, Security Hub, Config, Inspector, WAF, Macie, VPC networking and security groups — and familiarity with Azure equivalents
• Advanced understanding of cloud network architecture including VPC and VNet design, segmentation, private connectivity, DNS, TLS, certificate management, firewalls, and zero-trust access patterns
• Strong Terraform and infrastructure-as-code proficiency — able to read, review, and submit IaC and pipeline configuration changes
• Practical understanding of Kubernetes, Docker, Linux, and Windows workloads and CI/CD toolchains
• Scripting proficiency in Python, Bash, or a comparable modern language for automation, data extraction, and reporting
• Working knowledge of NIST CSF and SP 800-53, CIS Benchmarks, HITRUST, SOC 2, and HIPAA as applied to healthcare SaaS environments
• Incident response fundamentals: log analysis, timeline reconstruction, containment decision-making, and evidence handling

Our Commitment: Personify Health is an equal opportunity employer committed to diversity, equity, inclusion, and belonging. We cultivate a work environment where differences are celebrated, and employees of all backgrounds are empowered to thrive—because diversity is core to who we are and critical to our work in health and wellbeing.

Stay Safe: Personify Health will never ask for payment or sensitive personal information like social security numbers during hiring. All official communication comes from verified company email addresses and or our secure applicant tracking system. Suspicious requests? Report them to talent@personifyhealth.com. View all legitimate openings at personifyhealth.com/careers.