{"id":831988,"url":"https://alion.io/job/dfo-cybersecurity-engineer","title":"Cybersecurity Engineer","company":{"id":673447,"name":"Digital Family Office","domain":"dfo.io","url":"https://alion.io/company/dfo-2","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":null},"role":"Security","role_family":"Security","seniority":"senior","employment_type":null,"work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"board_field","remote_working_hours":{"label":"EST","utc_offset_min":-5,"utc_offset_max":-5},"hiring_geo_confidence":"structured","locations":["Manila, Philippines"],"countries":["PH"],"hiring_countries":["PH"],"hiring_countries_total":1,"salary":null,"salary_estimate":{"min_usd":19000,"max_usd":44000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":2372},"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"CI/CD","optional":false},{"name":"GCP","optional":false},{"name":"GitHub","optional":false},{"name":"HashiCorp Vault","optional":false},{"name":"HIPAA","optional":false},{"name":"IAM","optional":false},{"name":"ISO 27001","optional":false},{"name":"OWASP Top 10","optional":false},{"name":"OWASP ZAP","optional":false},{"name":"PCI DSS","optional":false},{"name":"Python","optional":false},{"name":"Semgrep","optional":false},{"name":"SIEM","optional":false},{"name":"Snyk","optional":false},{"name":"SOC 2","optional":false},{"name":"Trivy","optional":false},{"name":"FHIR","optional":true},{"name":"HL7","optional":true},{"name":"Zero Trust","optional":true}],"status":"live","first_seen_at":"2026-06-10T17:34:01Z","employer_posted_date":"2026-06-10","last_verified_at":"2026-10-30T02:11:43Z","board_verified":true,"closed_at":null,"days_open":141,"trust":{"level":"stale","repost_count":0,"flags":["stale"],"days_open":140},"description":"About the Role\nWe're hiring our first dedicated Cybersecurity Engineer to own the full security posture of a growing multi-vertical telehealth platform and EHR system handling Protected Health Information (PHI). This is a senior, hands-on build-and-maintain role - not a compliance checkbox or one-time audit. You'll embed security across our engineering culture, CI/CD pipeline, and GCP (Google Cloud Platform)-native cloud infrastructure, and keep us defensible as we scale across multiple healthcare verticals.\nYou'll serve as Sphere's first security hire, building the foundation ahead of a CISO (Chief Information Security Officer) joining in 2027. Everything you build should be documented, scalable, and transferable. You'll report directly to engineering leadership and partner closely with product and backend engineers daily.\nSchedule: 9 AM to 6 PM EST\nWhat You'll Own\nApplication & Cloud Security - Continuously assess and harden web apps, APIs, and GCP-native infrastructure; implement security controls across all environments and healthcare verticals\nDevSecOps & Secure SDLC - Integrate security gates into the CI/CD pipeline: SAST/DAST, dependency scanning, secrets detection, container image scanning, and secure coding standards\nHIPAA/HITECH Compliance - Maintain and improve our compliance posture including technical safeguards, access controls, audit logging, encryption standards, and BAA oversight; lay groundwork for HITRUST CSF certification\nVulnerability & Threat Management - Run ongoing vulnerability assessments, manage a risk register, triage findings, and drive remediation with engineering\nIncident Response - Own the IR plan; lead detection, containment, and post-mortem for security incidents\nSecurity Foundation Building - Document all security policies, controls, and architecture decisions to enable a smooth handoff to an incoming CISO in 2027\nSecurity Culture - Be the go-to security resource for engineering and product - make PHI protection a default, not an afterthought\nYou're a Strong Fit If You Have\n5+ years of experience in application security, cloud security, or security engineering\nHands-on experience with DevSecOps tooling (e.g., Snyk, Trivy, Semgrep, GitHub Advanced Security, HashiCorp Vault, OWASP ZAP)\nStrong GCP security fundamentals - GCP Security Command Center, Cloud Armor, Chronicle SIEM, VPC Service Controls, IAM, and Cloud Logging\nDirect experience with HIPAA, HITECH, or comparable regulated environments (SOC 2, PCI-DSS, ISO 27001 a plus)\nProficiency in at least one scripting/automation language (Python, Bash, or similar)\nSolid understanding of web application security (OWASP Top 10, API security, auth/authz patterns)\nAbility to work independently and cross-functionally - you'll be the sole security voice for 12-18 months\nExcellent written communication - able to document policies, explain risk to non-technical stakeholders, and write clear incident reports\nComfortable working with meaningful overlap with US Eastern or Pacific hours\nNice to Have\nSecurity certifications: CISSP, CISM, CEH, Security+, GCP Professional Cloud Security Engineer, or equivalent\nFamiliarity with HITRUST CSF framework\nExperience in healthcare tech, telehealth, or multi-vertical health platforms\nFamiliarity with FHIR/HL7 data standards and EHR security considerations\nExperience conducting or managing third-party penetration tests\nExposure to Zero Trust architecture or SASE frameworks","description_format":"text","description_chars":3441,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"Philippines","iso":"PH","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","Information Security","Family Offices"],"lifecycle":[{"event":"open","at":"2026-09-12T16:56:59Z"}],"visa":[],"liveness":{"score":7,"band":"cold","label":"Long shot","p_open":1,"p_active":0.262,"p_room":0.28,"age_days":140,"expected_fill_days":29,"reasons":["conf:1","win:tail","crowd:"],"computed_at":"2026-10-29T05:49:05Z"},"pay":null,"html_url":"https://alion.io/job/dfo-cybersecurity-engineer","json_url":"https://alion.io/job/dfo-cybersecurity-engineer.json","meta":{"generated_at":"2026-10-30T05:52:07Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":8041,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-31T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":673447},"rest":"https://alion.io/mcp/rest/get_company?id=673447"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fdfo-cybersecurity-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fdfo-cybersecurity-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fdfo-cybersecurity-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/dfo-cybersecurity-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fdfo-cybersecurity-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":831988}},{"tool":"search_jobs","arguments":{"company":"dfo.io","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":831988},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}