{"id":831651,"url":"https://alion.io/job/therapynotes-cloud-security-engineer","title":"Cyber Security Engineer (Cloud Security)","company":{"id":688861,"name":"TherapyNotes","domain":"therapynotes.com","url":"https://alion.io/company/therapynotes","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workable","truth_index":null},"role":"Security","role_family":"Security","seniority":null,"employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"board_field","remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Philadelphia, United States"],"countries":["US"],"hiring_countries":["US"],"hiring_countries_total":1,"salary":{"min":110000,"max":130000,"currency":"USD","period":"year","gross":null,"usd_annual":130000},"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"Azure AKS","optional":false},{"name":"CI/CD","optional":false},{"name":"Cloudflare","optional":false},{"name":"DLP","optional":false},{"name":"GitOps","optional":false},{"name":"HIPAA","optional":false},{"name":"ISO 27001","optional":false},{"name":"Kubernetes","optional":false},{"name":"Linux","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"OpenTofu","optional":false},{"name":"PCI DSS","optional":false},{"name":"SIEM","optional":false},{"name":"Terraform","optional":false},{"name":"Windows","optional":false},{"name":"Zero Trust","optional":false}],"status":"live","first_seen_at":"2026-10-29T00:00:00Z","employer_posted_date":"2026-10-29","last_verified_at":"2026-11-02T07:30:36Z","board_verified":true,"closed_at":null,"days_open":4,"trust":{"level":"ok","repost_count":2,"flags":["repost"],"days_open":4},"description":"About Us\nTherapyNotes is the go-to superhero for behavioral health Practice Management and EHR software! Our top-notch SaaS solution handles scheduling, billing, documenting, telehealth, and more so clinicians can focus on awesome patient care.\nWe're a dynamic team of pros who love to innovate and push the envelope, keeping our software cutting-edge. Join us, and let's revolutionize behavioral health software together while making a real difference!\nThe Position\nTherapyNotes is seeking an experienced, hands-on Cloud Security Engineer to secure our cloud infrastructure, containerized workloads, and infrastructure-as-code pipelines. The right candidate brings deep expertise in cloud security posture management, Kubernetes and container security, and Zero Trust network access, and is comfortable working in a healthcare-regulated environment (HIPAA, HITRUST, HITECH). This role also contributes to broader security engineering efforts - vulnerability management, incident response, and identity and access security - as part of a small, collaborative security team.\nRequired Skills and Experience\nBachelor's degree in information security, computer science, or related field preferred; equivalent experience considered.\n5+ years of experience in cloud security engineering or related role.\nDeep, hands-on experience securing cloud infrastructure and cloud-based applications (Azure preferred, AWS a plus).\nHands-on network security experience and a strong understanding of network architecture, connectivity, segmentation, and firewall controls.\nExperience securing containerized workloads and Kubernetes environments (e.g., AKS) - network policy, workload identity, runtime protection.\nExperience with cloud security posture management (CSPM) and remediating misconfigurations across cloud environments.\nExperience securing IaC orchestration platforms - access control, secrets management, and deployment approval workflows (e.g., Terraform, OpenTofu).\nExperience with Microsoft Entra ID, including Conditional Access, Entitlement Management, and just-in-time (JIT) privileged access models.\nExperience with Zero Trust / SASE tooling (e.g., Cloudflare Zero Trust, WAF, Gateway, or equivalent).\nKnowledge of security frameworks (NIST, ISO 27001, CIS) and compliance frameworks (HITRUST, PCI DSS).\nProven ability to conduct security assessments, vulnerability management, and incident response.\nStrong understanding of OS platforms (Windows, Linux) and endpoint security.\nIndustry certifications such as CISSP, SSCP, Security+, or a cloud security certification (Azure/AWS) preferred.\nResponsibilities\nManage and secure cloud infrastructure and cloud-based applications, with a focus on Azure.\nSecure containerized workloads and Kubernetes environments (e.g., AKS) - network policy, workload identity, runtime protection, and container image scanning.\nOwn and mature cloud security posture management (CSPM) - continuously identify and remediate misconfigurations across cloud environments.\nSecure infrastructure-as-code orchestration platforms - access control, secrets management, and deployment approval workflows for Terraform/OpenTofu pipelines.\nManage and secure identities in Microsoft Entra ID through Conditional Access, Entitlement Management, and just-in-time (JIT) privileged access models.\nReview network diagrams and proposed connectivity changes, provide security input on segmentation and sensitive data flows, and work with IT and SRE teams to address identified concerns.\nAdminister Zero Trust network access and edge security tooling to secure access to corporate and cloud resources.\nHands-on management of broader security solutions across the organization: SIEM, DLP, E/XDR, vulnerability management.\nMonitor security alerts, respond to and escalate incidents, and participate in the incident response on-call rotation.\nConduct threat analysis, vulnerability assessments, and risk evaluations; document findings, manage mitigation, and report status to leadership.\nDevelop queries, scripts, integrations, and automated workflows that improve cloud security operations.\nCollaborate with development teams to ensure security is continuously integrated into the SDLC and CI/CD pipeline.\nConduct periodic cloud configuration and access reviews to ensure compliance with security standards.\nParticipate in audits and assessments, supporting governance, risk management, and compliance (GRC) efforts.\nAdditional Skills\nFamiliarity with GitOps tooling (Argo, Flux) for secure deployment in Kubernetes environments.\nNetwork or Systems Engineering background a huge plus.\nFamiliarity with programming/scripting languages a plus.\nPassion for continuous learning and professional development, with a commitment to staying updated and trained on the latest trends and technologies.\nEagerness to engage in new challenges and adapt quickly.\nStrong work ethic and drive to take ownership of projects and see them through to completion.\nStrong collaboration skills, able to work effectively with cross functional teams.\nBenefits\nCompetitive salary - $110,000-$130,000\nEmployer sponsored health, dental, vision, life, and disability insurance\nRetirement plan with company contribution\nAnnual company profit sharing\nPersonal development/training budget\nOpen, collaborative work environment\nExtensive 2-week onboarding plan\nComprehensive mentorship program\nEqual Opportunity Employer Statement & Applicant Rights\nTherapyNotes LLC is an Equal Opportunity Employer and does not discriminate based on race, color, religion, sex, national origin, age, disability, genetic information, or any other protected status under federal, state, or local law. We are committed to providing a workplace free of discrimination and harassment.For more information about your rights under federal employment laws, please review the following:\nKnow Your Rights: Workplace Discrimination is Illegal\n Family and Medical Leave Act (FMLA): Employee Rights Under FMLA\nIf you require a reasonable accommodation during the application process, please contact .\n10/6/2026","description_format":"text","description_chars":6086,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["Continuous learning","Professional development","Retirement plans"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","Cloud Security","EHR & Clinical Software","Practice Management Software"],"lifecycle":[{"event":"open","at":"2026-09-12T16:56:41Z"},{"event":"close","at":"2026-09-21T15:00:11Z"},{"event":"reopen","at":"2026-09-21T17:23:19Z"},{"event":"close","at":"2026-10-18T14:00:21Z"},{"event":"reopen","at":"2026-10-19T17:16:52Z"},{"event":"close","at":"2026-10-23T14:44:32Z"},{"event":"reopen","at":"2026-10-23T21:29:23Z"},{"event":"close","at":"2026-10-28T14:54:49Z"},{"event":"reopen","at":"2026-10-29T21:10:49Z"}],"visa":[],"liveness":{"score":68,"band":"ok","label":"Likely open","p_open":1,"p_active":0.677,"p_room":1,"age_days":4,"expected_fill_days":27,"reasons":["conf:5","repost:2","velocity","win:early"],"computed_at":"2026-11-02T06:13:15Z"},"pay":{"stated_usd_annual":130000,"is_top_pay":false},"html_url":"https://alion.io/job/therapynotes-cloud-security-engineer","json_url":"https://alion.io/job/therapynotes-cloud-security-engineer.json","meta":{"generated_at":"2026-11-02T10:28:40Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":14510,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-03T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":688861},"rest":"https://alion.io/mcp/rest/get_company?id=688861"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Ftherapynotes-cloud-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Ftherapynotes-cloud-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Ftherapynotes-cloud-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/therapynotes-cloud-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Ftherapynotes-cloud-security-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":831651}},{"tool":"search_jobs","arguments":{"company":"therapynotes.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":831651},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}