Senior Information Security Engineer

Join Reveleer, a leading healthcare SaaS platform, as a Senior Information Security Engineer. In this role, you will be responsible for designing, implementing, and managing enterprise-grade security solutions aligned with HIPAA, HITRUST, SOC 2, NIST 800-53, and NIST AI RMF. You will work closely with Data Science and AI Engineering to secure model development and training, and contribute to AI governance alongside Compliance and Legal. Additionally, you will embed security into CI/CD pipelines, manage endpoint and identity security, and support audits and evidence collection for compliance.

• Designing, implementing, and managing enterprise-grade security solutions aligned to HIPAA, HITRUST, SOC 2, NIST 800-53, and NIST AI RMF.
• Securing AI pipelines, models, and the PHI that flows through them, and partnering with Data Science and AI Engineering to secure model development.
• Embedding security into CI/CD pipelines with SAST, DAST, SCA, secrets scanning, and IaC scanning, and performing threat modeling, secure design reviews, and code reviews.

• Experience securing containerized and serverless workloads (e.g., EKS, Lambda)
• 5+ years of experience in security engineering or related technical security roles
• Hands-on experience with SIEM, EDR/XDR, IAM, vulnerability management, and security automation
• Bachelor’s degree in Computer Science, Information Security, or equivalent experience
• Analytical and detail-oriented with strong problem-solving skills
• Ability to balance business needs with risk mitigation
• Collaborative team player with a proactive approach to continuous improvement
• Familiarity with HIPAA, HITRUST, NIST, and SOC 2 requirements
• Excellent communication skills, able to translate complex technical topics for non-technical stakeholders
• Strong knowledge of cloud-native security (AWS, Azure, GCP) and modern SaaS architectures
• Certifications such as CISSP, CISM, CCSP, AWS Security Specialty, or GIAC (GSEC, GCIA, GCIH)
• Experience with Terraform, Ansible, or CloudFormation for infrastructure-as-code security
• Strong scripting skills (Python, PowerShell, or Bash)
• Experience in DevSecOps pipelines and tools (e.g., Jenkins, Bitbucket)