{"id":3098815,"url":"https://alion.io/job/personify-health-cloud-security-engineer","title":"Cloud Security Engineer","company":{"id":721,"name":"Personify Health","domain":"personifyhealth.com","url":"https://alion.io/company/personify-health","size_band":"51-200","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"iCIMS","truth_index":null},"role":"Security","role_family":"Security","seniority":null,"employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Tuzla, Bosnia and Herzegovina"],"countries":["BA"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":27000,"max_usd":81000,"period":"year","method":null,"sample_n":5423},"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Apache TVM","optional":false},{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"Bash","optional":false},{"name":"CI/CD","optional":false},{"name":"CIS Benchmarks","optional":false},{"name":"Crowdstrike","optional":false},{"name":"DNS","optional":false},{"name":"Docker","optional":false},{"name":"HIPAA","optional":false},{"name":"IAM","optional":false},{"name":"ISO 27001","optional":false},{"name":"Kubernetes","optional":false},{"name":"Microsoft Defender","optional":false},{"name":"Microsoft Defender for Cloud","optional":false},{"name":"NIST CSF","optional":false},{"name":"Python","optional":false},{"name":"SIEM","optional":false},{"name":"SOC 2","optional":false},{"name":"Terraform","optional":false},{"name":"Threat Modeling","optional":false},{"name":"Windows","optional":false},{"name":"Zero Trust","optional":false}],"status":"live","first_seen_at":"2026-10-22T16:58:46Z","employer_posted_date":"2026-10-22","last_verified_at":"2026-10-23T15:27:26Z","board_verified":true,"closed_at":null,"days_open":1,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":1},"description":"Overview\nWho We Are\nBecause health is personal. That's why Personify Health created the first and only personalized health platform-bringing health plan administration, holistic wellbeing solutions, and comprehensive care navigation together in one place. We serve employers, health plans, and health systems with data-driven solutions that reduce costs while actually improving health outcomes. Together, our team is on a mission to empower people to lead healthier lives.\nLearn even more about the work that drives us at personifyhealth.com.\nResponsibilities\nReady To Embed Cloud Security Directly Into the Infrastructure and Pipelines That Power a Regulated Healthcare Platform?\nWhy This Role Matters\nSecurity policy only protects members when it’s translated into automated guardrails, tuned monitoring, and practical controls that engineering teams can actually implement. This role sits inside Platform Operations - not in a separate InfoSec silo - because that’s where cloud security work gets done. You’re the subject matter expert on AWS and Azure infrastructure security, the person who responds when incidents hit platform infrastructure, and the engineer who builds the automation that makes remediation scale.\nWhat You'll Actually Do\nDefine and maintain cloud security standards: Create, publish, and maintain security guidelines and reference patterns for AWS and Azure, aligned to CIS Benchmarks, AWS and Azure Well-Architected guidance, HITRUST CSF, NIST CSF, and SP 800-53.\nBuild and tune security monitoring: Design, implement, and continuously optimize security monitoring and logging across cloud accounts - including CloudTrail, GuardDuty, Security Hub, AWS Config, Inspector, Microsoft Defender for Cloud, CrowdStrike Falcon Complete, and SIEM integration.\nRespond to platform security incidents: Lead detection, triage, containment, evidence preservation, root cause analysis, and post-incident corrective actions for infrastructure-affecting security events - coordinating with the Information Security CSIRT process.\nOwn TVM triage and remediation coordination: Validate findings, eliminate false positives, assign risk and priority, track remediation against SLAs, and report status across cloud infrastructure and platform services.\nDrive security remediation at scale: Coordinate misconfiguration cleanup, patch campaigns, IAM right-sizing, key and secret management, and network hardening with Platform Operations teams - automating fixes through Terraform, pipelines, and policy-as-code wherever practical.\nEmbed security into the SDLC and CI/CD: Partner with development and DevOps teams to integrate IaC scanning, container and dependency scanning, secrets detection, and security guardrails that fail fast without blocking delivery.\nAdvise on architecture and design decisions: Serve as the platform security SME during architecture reviews, threat modeling, new service evaluations, and design discussions across engineering and product teams.\nSupport compliance and audit obligations: Partner with Information Security and Compliance on control mapping, HITRUST, SOC 2, and ISO 27001 audit evidence, risk assessments, exception documentation, and gap closure.\nApply AI and automation to security operations: Use AI-assisted tooling to accelerate alert triage, log summarization, documentation, and repetitive analysis - and surface automation opportunities within recurring security workflows.\nMaintain security runbooks and playbooks: Develop and keep current the detection logic, runbooks, playbooks, and knowledge base documentation that support cloud security operations.\nParticipate in security on-call rotation: Share on-call and escalation responsibility for security events affecting platform infrastructure.\nQualifications\nWhat You Bring to Our Team\nEducation & Experience\nBachelor’s degree in Cybersecurity, Information Technology, Computer Science, or a closely related field - or equivalent demonstrated experience\n3+ years securing AWS and/or Azure environments, implementing IAM, encryption, and network controls, and managing security posture via native and third-party tools\nHands-on experience with at least one SIEM or cloud-native security monitoring platform and at least one vulnerability management platform\nOne or more current security certifications: AWS Certified Security - Specialty, CompTIA Security+, ISC2 CCSP or CISSP, or CSA CCSK\nExperience in healthcare, health plan administration, or another highly regulated environment preferred\nTechnical Skills\nWorking knowledge of AWS security services: IAM, KMS, GuardDuty, Security Hub, Config, Inspector, WAF, Macie, VPC networking and security groups - and familiarity with Azure equivalents\nAdvanced understanding of cloud network architecture including VPC and VNet design, segmentation, private connectivity, DNS, TLS, certificate management, firewalls, and zero-trust access patterns\nStrong Terraform and infrastructure-as-code proficiency - able to read, review, and submit IaC and pipeline configuration changes\nPractical understanding of Kubernetes, Docker, Linux, and Windows workloads and CI/CD toolchains\nScripting proficiency in Python, Bash, or a comparable modern language for automation, data extraction, and reporting\nWorking knowledge of NIST CSF and SP 800-53, CIS Benchmarks, HITRUST, SOC 2, and HIPAA as applied to healthcare SaaS environments\nIncident response fundamentals: log analysis, timeline reconstruction, containment decision-making, and evidence handling\nOur Commitment: Personify Health is an equal opportunity employer committed to diversity, equity, inclusion, and belonging. We cultivate a work environment where differences are celebrated, and employees of all backgrounds are empowered to thrive-because diversity is core to who we are and critical to our work in health and wellbeing.\nStay Safe: Personify Health will never ask for payment or sensitive personal information like social security numbers during hiring. All official communication comes from verified company email addresses and or our secure applicant tracking system. Suspicious requests? Report them to . View all legitimate openings at personifyhealth.com/careers.","description_format":"text","description_chars":6207,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["Equity"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Cloud Security","Custom Software Development","Digital Mental Health"],"lifecycle":[{"event":"open","at":"2026-10-22T16:58:46Z"}],"visa":[],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":0,"expected_fill_days":5,"reasons":["conf:0","velocity","win:early"],"computed_at":"2026-10-23T05:54:15Z"},"pay":null,"html_url":"https://alion.io/job/personify-health-cloud-security-engineer","json_url":"https://alion.io/job/personify-health-cloud-security-engineer.json","meta":{"generated_at":"2026-10-23T18:16:37Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":27847,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-24T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":721},"rest":"https://alion.io/mcp/rest/get_company?id=721"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fpersonify-health-cloud-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fpersonify-health-cloud-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fpersonify-health-cloud-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/personify-health-cloud-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fpersonify-health-cloud-security-engineer"}]}