Note: The job is a remote job and is open to candidates in USA. Xsolis is an AI-driven technology company reducing administrative waste in healthcare by enabling smarter collaboration between providers and payers. As a Senior Cloud Security Engineer, you will lead the design and implementation of cloud security measures, ensuring compliance with healthcare regulations and safeguarding sensitive patient data.

Responsibilities

• Design and implement secure cloud architectures across AWS
• Lead the development of security guardrails, policies, and standards (IAM, network segmentation, encryption, etc.)
• Implement Zero Trust architecture principles across cloud-native systems and user endpoints
• Secure containerized and serverless workloads (ECS, Kubernetes, Docker, Lambda, etc.)
• Assess existing cloud implementations, identifying security issues and prioritizing them for remediation
• Define and enforce security controls for endpoints and resource access
• Implement improvements in identity lifecycle and PAM
• Partner with engineering teams to design and implement a secure VDI environment to support PHI access
• Define and enforce security controls for AI/ML and GenAI applications
• Partner with Data Science to mitigate risks such as model poisoning, prompt injection, data leakage, and adversarial attacks
• Secure Agentic AI systems, including autonomous workflows and decision-making agents
• Collaborate with data science teams to embed security into model development lifecycle (MLSecOps)
• Collaborate with GRC to ensure adherence to healthcare regulations (HIPAA, HITRUST, SOC 2, etc.)
• Conduct risk assessments and threat modeling for cloud and AI systems
• Support audits and compliance initiatives with appropriate controls and documentation
• Implement and tune cloud-native security monitoring and detection (SIEM, CSPM, CWPP)
• Develop automated response and remediation workflows
• Help manage incident response efforts for cloud security events
• Deep experience with SAST, DAST, SCA, and the use of AI coding tools
• Familiarity with programming languages (Python, Java, Node.js, C#)
• Integrate and optimize security in CI/CD pipelines and infrastructure-as-code (Terraform, CloudFormation)
• Automate security controls, scanning, and policy enforcement
• Partner with engineering teams to shift security left
• Mentor other engineers, security analysts, and promote security best practices across teams
• Partner with product, engineering, people operations, enterprise systems, and data science teams
• Stay ahead of emerging threats in cloud and AI security
• Collaborate with various teams (internal and external) to meet business objectives and support Xsolis values

Skills

• Bachelor's degree in Cybersecurity, Computer Science, Information Systems or working experience required
• 5+ years of experience in cloud security or cybersecurity engineering
• Strong knowledge of cloud security principles (IAM, networking, encryption, logging, etc.)
• Hands-on experience using and securing AWS services
• Solid understanding of securing containerized environments (Kubernetes, Docker)
• Deep understanding of security in regulated environments (HIPAA, HITRUST, SOC 2)
• Broad experience implementing automation to gain efficiencies
• Experience implementing Zero Trust Architecture
• Proficiency in programming or scripting
• Experience identifying AI security risks and securing AI technologies
• Ability to work and indirectly lead a wide range of professionals and team members
• Master's degree in Cybersecurity, Computer Science, or Information Systems degree desirable
• Certifications such as CISSP, CCSP, AWS Security certifications are highly desired

Benefits

• Medical/Dental/Vision insurance
• 401K company match
• Flexible Paid Time Off
• Paid parental leave
• HSA/FSA options
• Educational reimbursement program
• Employer-paid EAP & Mental Health services

Company Overview