{"id":3491236,"url":"https://alion.io/job/rezilient-health-senior-security-engineer","title":"Senior Security Engineer","company":{"id":7727,"name":"Rezilient Health","domain":"rezilienthealth.com","url":"https://alion.io/company/rezilient-health","size_band":"51-200","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workable","truth_index":null},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"board_field","remote_working_hours":null,"hiring_geo_confidence":"structured","locations":[],"countries":[],"hiring_countries":["US"],"hiring_countries_total":1,"salary":null,"salary_estimate":{"min_usd":118000,"max_usd":213000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":390},"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":true,"technologies":[{"name":"AWS","optional":false},{"name":"CI/CD","optional":false},{"name":"HIPAA","optional":false},{"name":"IAM","optional":false},{"name":"ISO 27001","optional":false},{"name":"Least Privilege","optional":false},{"name":"NIST CSF","optional":false},{"name":"Python","optional":false},{"name":"SIEM","optional":false},{"name":"SOC 2","optional":false},{"name":"Terraform","optional":false},{"name":"Threat Modeling","optional":false}],"status":"live","first_seen_at":"2026-10-29T23:39:48Z","employer_posted_date":"2026-10-29","last_verified_at":"2026-11-03T17:41:42Z","board_verified":true,"closed_at":null,"days_open":4,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":4},"description":"About the Company\nAt Rezilient, we’re redefining what primary care looks like, making it more accessible, seamless, and patient-centered than ever before. Through our innovative CloudClinic model, we combine virtual provider visits with smart, tech-enabled infrastructure to deliver timely, personalized care. By removing traditional barriers to access and continuously expanding our specialty offerings, we’re building a healthcare experience that’s as convenient as it is comprehensive.\nAbout the Role\nRezilient is seeking a Senior Security Engineer to serve as a hands-on, senior individual contributor supporting our information security programs. This role is responsible for protecting the systems, data, and infrastructure that power Rezilient’s CloudClinic model, with a particular focus on safeguarding protected health information (PHI) and personally identifiable information (PII) across our cloud platform, clinical environments, and corporate systems.\nYou will design, build, and operate the technical security controls that keep Rezilient secure, from cloud and application security to identity and access management, endpoint protection, detection, and incident response. Working closely with Engineering, Product, IT, Clinical Operations, and our Security & Compliance team, you will embed security into how we build and run our platform, and provide the technical evidence and expertise that support frameworks such as SOC 2, HIPAA/HITECH, and HITRUST.\nThis is a senior IC role for an engineer who can move comfortably between architecture and execution. The ideal candidate brings deep technical expertise, sound judgment, and the ability to translate security needs into practical solutions that enable a fast-moving healthcare technology company to grow safely.\nKey Responsibilities\nCloud & Infrastructure Security\nDesign, implement, and maintain security controls across Rezilient’s cloud infrastructure, including network security, encryption, secrets management, logging, and configuration hardening.\nBuild and manage security guardrails using infrastructure as code, cloud-native security tools, and automated policy enforcement.\nContinuously assess cloud environments for misconfigurations, excessive permissions, and exposure risks, and drive remediation with Engineering.\nEnsure PHI and PII are protected at rest and in transit, with appropriate data classification, access restrictions, and retention controls.\nApplication & Product Security\nPartner with Product and Engineering to embed security into the software development lifecycle, from design through release.\nLead threat modeling and security design reviews for new features, integrations, infrastructure, and architecture decisions.\nOwn application security tooling and processes, including static and dynamic analysis, dependency and container scanning, and secure code review.\nEstablish secure development standards and coach engineers on secure coding practices and common vulnerability classes.\nAssess the security of third-party integrations, APIs, and EHR and partner data exchanges that handle patient data.\nIdentity, Access & Endpoint Security\nPartner with IT to design and enforce identity and access management controls, including SSO, MFA, role-based access, least privilege, and access reviews.\nDetection, Response & Vulnerability Management\nBuild and tune security monitoring, logging, and alerting to detect suspicious activity across cloud, application, identity, and endpoint layers.\nServe as a technical lead during security incidents, coordinating investigation, containment, eradication, recovery, and post-incident review.\nDevelop and maintain incident response runbooks and lead tabletop exercises with cross-functional teams.\nOwn the vulnerability management program, including scanning, prioritization, remediation tracking, and coordination of penetration tests.\nMonitor the threat landscape relevant to healthcare and cloud environments and proactively adapt defenses.\nSecurity Governance & Compliance Support\nProduce evidence for technical controls for SOC 2, HIPAA/HITECH, HITRUST, and related frameworks.\nSupport audits, risk assessments, and remediation efforts with technical expertise, documentation, and control testing.\nContribute to security policies, standards, and procedures, ensuring they are technically sound and practical to operate.\nTechnical Leadership & Security Culture\nAct as a trusted security advisor to Engineering, Product, IT, and leadership, translating technical risk into clear business impact and recommendations.\nAutomate security processes and reduce manual work through scripting, tooling, and integration.\nContribute to security awareness efforts with practical, role-specific guidance for engineers and staff.\nHelp shape the long-term information security roadmap and mentor team members as the security function grows.\nRequirements\nBachelor’s degree in Computer Science, Cybersecurity, Information Technology, or a related field, or equivalent practical experience.\n5+ years of experience in information security, security engineering, or a closely related technical role, ideally in healthcare, digital health, or SaaS/cloud environments.\nDeep hands-on experience securing AWS cloud environments, including IAM, networking, encryption, logging, and cloud-native security services.\nStrong background in application security, including threat modeling, secure code review, and security testing tools within CI/CD pipelines.\nExperience with identity and access management, endpoint security, and security monitoring or SIEM tools.\nProven experience leading or supporting incident response and vulnerability management programs.\nWorking knowledge of security and compliance frameworks such as SOC 2, HIPAA/HITECH, HITRUST, ISO 27001/27002, or NIST CSF, and experience providing technical evidence for audits.\nProficiency in scripting or programming (e.g., Python, Go, or Bash) and experience with infrastructure as code (e.g., Terraform).\nExcellent communication skills, with the ability to explain technical risks to both technical and non-technical audiences.\nComfort operating as a senior individual contributor in a fast-moving startup environment with broad ownership.\nExperience protecting PHI or other regulated data is strongly preferred.\nRelevant certifications such as CISSP, CCSP, OSCP, GIAC (e.g., GCIH, GCLD, GWAPT), or cloud security certifications are a plus.\nBenefits\nAt Rezilient Health, we're on a mission to make humane healthcare truly abundant, and we invest in the people who make that possible. This is a high-impact role where your ideas directly shape how care is delivered, within a supportive, collaborative, and diverse team that believes healthcare is fundamentally a human experience. We back that commitment with a robust total rewards package:\nMeaningful ownership through stock options, allowing you to share directly in the value you help create as we grow\nCompetitive base compensation\nComprehensive medical, dental, and vision coverage options, with Rezilient contributing toward your premiums\nComplimentary access to Rezilient's clinical programs for you and your household members, the same connected care we deliver to our patients\n401(k) retirement plan to support your long-term financial well-being\nFlexible Paid Time Off, so you can recharge without counting days\nDedicated Paid Sick Leave, separate from your FTO, for when health needs come first\n11 paid company holidays each year\nPaid family leave to support you through life's biggest moments\nOptional ancillary benefits, including life insurance, disability coverage, and a Health Savings Account (HSA)","description_format":"text","description_chars":7646,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Life insurance","Parental leave","Retirement plans","Stock options"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Telemedicine & Virtual Care","Primary Care & Medical Centers"],"lifecycle":[{"event":"open","at":"2026-10-29T23:39:48Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":4,"expected_fill_days":33,"reasons":["conf:2","win:early"],"computed_at":"2026-11-03T05:54:40Z"},"pay":null,"html_url":"https://alion.io/job/rezilient-health-senior-security-engineer","json_url":"https://alion.io/job/rezilient-health-senior-security-engineer.json","meta":{"generated_at":"2026-11-03T20:33:45Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":3255,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-04T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":7727},"rest":"https://alion.io/mcp/rest/get_company?id=7727"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Frezilient-health-senior-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Frezilient-health-senior-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Frezilient-health-senior-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/rezilient-health-senior-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Frezilient-health-senior-security-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3491236}},{"tool":"search_jobs","arguments":{"company":"rezilienthealth.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3491236},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}