{"id":122205,"url":"https://alion.io/job/included-health-staff-cloud-security-engineer","title":"Staff Cloud Engineer, Security","company":{"id":1238,"name":"Included Health","domain":"includedhealth.com","url":"https://alion.io/company/included-health","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Lever","truth_index":{"grade":"A","score":85,"open_postings":27,"ghost_share":0,"stale_share":0.407,"repost_share":0,"time_to_fill_p50_days":64,"computed_at":"2026-11-11T05:49:22Z"}},"role":"DevOps","role_family":"DevOps","seniority":"staff","employment_type":null,"work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"board_field","remote_working_hours":null,"hiring_geo_confidence":"structured","locations":[],"countries":[],"hiring_countries":["US"],"hiring_countries_total":1,"salary":null,"salary_estimate":{"min_usd":113000,"max_usd":210000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":395},"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"AWS Lambda","optional":false},{"name":"CI/CD","optional":false},{"name":"GCP","optional":false},{"name":"HIPAA","optional":false},{"name":"IAM","optional":false},{"name":"Python","optional":false},{"name":"Terraform","optional":false}],"status":"live","first_seen_at":"2025-10-06T15:41:37Z","employer_posted_date":"2025-10-06","last_verified_at":"2026-11-12T04:21:53Z","board_verified":true,"closed_at":null,"days_open":401,"trust":{"level":"stale","repost_count":0,"flags":["stale"],"days_open":400},"description":"At Included Health, security is central to the trust our members, customers, partners, and care teams place in us. We protect sensitive health information and the systems that support our products by building security into architecture, engineering practices, and day-to-day operations.\nOur Security Engineering team works closely with platform engineering and product teams to build practical, scalable security controls, especially focused on our infrastructure-as-code. We focus on reducing risk through automation, secure-by-default patterns, strong technical partnerships, and controls that teams can operate in real production environments.\nAs a Cloud Engineer on the Security team, you’ll help mature Included Health’s cloud security posture across primarily AWS environments, with consideration for GCP. You’ll design, implement, and automate controls that protect product infrastructure and help prevent unauthorized Protected Health Information (PHI) exfiltration.\nThis is a full-time, remote role reporting to the Senior Manager, Security Engineering. We are open to considering candidates at both the Senior and Staff levels.\nThe role requires hands-on technical execution as well as the ability to influence infrastructure, DevOps, engineering, and product teams.\nWhat You'll Do\nDesign and automate cloud security controls across Identity & Access Management (IAM), authorization, Just-in-Time access, data access, and platform access.\nImprove AWS and GCP security posture through Terraform guardrails, risk roadmaps, legacy remediation, and secure infrastructure patterns.\nBuild security tooling in Python, Go, and Lambda for vulnerability management, alerting, PHI logging, and cloud security workflows.\nSecure containers, workloads, and CI/CD pipelines through practical controls teams can operate in production.\nPartner with infrastructure, DevOps, engineering, and product teams on sensitive-data handling, incident response, and secure platform initiatives.\nDocument controls, standards, automation, and playbooks that help teams adopt secure workflows.\nWho You Are\nYou are a practical, hands-on cloud security engineer who can bring structure to ambiguous risks or control gaps without waiting for perfect clarity. You clarify the desired outcome, trust boundaries, stakeholders, constraints, and available facts, then make a reasonable first move and adapt as you learn.\nYou are comfortable going deep in code, cloud APIs, logs, identity policies, network traffic, CI/CD pipelines, and infrastructure configuration. You use evidence to test hypotheses and turn findings into durable fixes, reusable automation, clear documentation, or repeatable processes.\nYou build trust through preparation, responsiveness, direct communication, technical credibility, and follow-through. You listen to operational realities, explaining risks and tradeoffs clearly, and work with teams toward practical controls they can operate in production.\nYou take ownership through the full loop: coordination, escalation, validation, closure, and knowledge sharing. You know when to investigate independently, when to involve the right expertise, and when broader organizational alignment is needed.\nWhat You Bring\n5+ years of hands-on cloud security experience, with deep AWS expertise and familiarity with GCP.\nStrong technical depth across cloud infrastructure, identity, authorization, networking, containers, CI/CD, logging, monitoring, and security operations.\nExperience building security automation and infrastructure tooling in Python, Go, Terraform, and cloud-native services.\nExperience designing and operating access controls, including RBAC, ABAC, policy-as-code, granular engineering access, and Just-in-Time access.\nFamiliarity applying cloud security frameworks, HIPAA requirements, and related standards to production environments.\nBachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related field.","description_format":"text","description_chars":3943,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Telemedicine & Virtual Care","Care Coordination & Population Health","Health Insurance & Benefits"],"lifecycle":[{"event":"open","at":"2025-10-06T15:41:37Z"}],"visa":[{"country":"US","licensed_sponsor":true,"adverts_offering_sponsorship_24m":0,"sanctioned_now":false,"evidence":"H-1B filings in 12 months: 21 · green card filings: 2","filings_12m":21,"filings_prev_12m":10,"green_card_filings_12m":2,"median_offered_wage_usd":210326,"route":null,"cap_exempt":false,"checked_at":"2026-11-11T07:38:50+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)","US Department of Labor: PERM disclosure data (green cards)"],"filings_for_role_12m":15}],"liveness":{"score":10,"band":"cold","label":"Long shot","p_open":1,"p_active":0.342,"p_room":0.28,"age_days":400,"expected_fill_days":64,"reasons":["conf:2","win:tail","crowd:"],"computed_at":"2026-11-11T05:49:22Z"},"pay":null,"html_url":"https://alion.io/job/included-health-staff-cloud-security-engineer","json_url":"https://alion.io/job/included-health-staff-cloud-security-engineer.json","meta":{"generated_at":"2026-11-12T07:00:39Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":13930,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-13T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1238},"rest":"https://alion.io/mcp/rest/get_company?id=1238"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fincluded-health-staff-cloud-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":2,"usd":0.2},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fincluded-health-staff-cloud-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fincluded-health-staff-cloud-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/included-health-staff-cloud-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fincluded-health-staff-cloud-security-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":122205}},{"tool":"search_jobs","arguments":{"company":"includedhealth.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":122205},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}