Security Engineer (Cloud Security)

Location: Remote, United States; other listed locations include Charlotte, North Carolina; Denver, Colorado; and Minneapolis, Minnesota.

Starting salary: $100,000–$130,000, depending on geographic location, qualifications, and experience.

Company

hirify.global is a health-technology company providing health information, doctor-search, prescription-savings, and wellbeing services through brands including Healthline, Healthgrades, Fullspan Health, Medical News Today, and Optum Perks.

What you will do

• Design, implement, and maintain security controls and architectures for cloud infrastructure, applications, and data.
• Improve cloud security posture and vulnerability management, including pull-request scanning, finding triage, remediation tracking, coverage, and license optimization.
• Build software supply-chain controls and extend security into CI/CD pipelines, including governance of AI-authored code.
• Develop automation, internal tooling, and integrations that make security controls self-service across the developer platform and security stack.
• Partner with Platform and Software Engineering teams, perform code reviews and application security testing, and prioritize risk reduction.
• Participate in weekly on-call rotations, investigate and respond to incidents, perform root-cause analysis, and maintain security procedures aligned with HIPAA and NIST CSF.

Requirements

• Bachelor’s degree in Computer Science or a related field, or equivalent experience.
• 4+ years of experience in application security, cloud security, or a related cybersecurity role.
• Solid understanding of cloud security principles, architectures, and services; AWS or Azure preferred.
• Hands-on experience with cloud security posture management or CNAPP tools such as Wiz, Orca, or Prisma Cloud, including driving vulnerability findings to closure with engineering teams.
• Experience building security automation, tooling, and integrations, with working proficiency in at least one scripting or programming language.
• Working knowledge of secure coding practices and security frameworks, standards, and regulations including NIST CSF, HIPAA, and MITRE ATT&CK.
• Strong problem-solving and analytical skills, critical thinking, sound decision-making, and experience in incident response and recovery.
• Visa sponsorship is not provided for this role.

Nice to have

• Professional certifications such as CISSP, CCSP, OSCP, or GIAC.
• Expertise in AWS security controls, monitoring, and orchestration, including SCPs, GuardDuty, Config, and Macie.
• Familiarity with Terraform, GitHub, DevSecOps workflows, GitHub Actions, and other CI/CD pipelines.
• Experience securing AI- or LLM-assisted development workflows or reviewing AI-generated code at scale.
• Experience with internal developer platforms or portals such as Backstage.
• Experience working alongside an MDR or managed SOC provider.

Culture & Benefits

• Collaborative Agile environment with a security-minded culture and close partnership across business, IT, Platform, and Engineering teams.
• Health, dental, vision, life, disability, pharmacy, mental-health, wellness, HSA, FSA, and income-protection benefits, subject to eligibility.
• Paid time off, holiday pay, paid parental bonding benefits, and a 401(k) with match.
• Employee assistance, commuter, gym and fitness, and pet-services programs.
• The employer intends to fill the current vacancy by February 9, 2027.