Staff Cloud Security Engineer

$200,000 - $245,000/Yr

Ro - New York, NY

Full-time - Senior

New York, NY

Educational Services

About the position

The Staff Cloud Security Engineer at Ro is a senior-level individual contributor role focused on maintaining and enhancing the security of cloud infrastructures. This position involves collaborating with various teams to implement security measures, automate security operations, and ensure compliance with industry standards. The engineer will play a crucial role in protecting patient data and supporting the company's mission of providing effective healthcare solutions through a secure cloud environment.

Responsibilities

• Maintain and operate secure cloud infrastructure, focusing on AWS and cloud-native technologies.
• Secure applications built for cloud environments by automating security assessments and integrating security practices into the development lifecycle.
• Implement robust security controls for cloud workloads and data, including containers and serverless architectures.
• Lead security hardening across all cloud security layers, particularly Kubernetes clusters.
• Collaborate with teams to design and implement secure platform solutions, integrating security into development processes.
• Develop and deploy automation solutions to enhance security operations and reduce manual efforts.
• Contribute to incident response efforts, including detection, analysis, and recovery.
• Ensure compliance with standards such as SOC 2, HIPAA, and HITRUST, implementing automated compliance checks.

Requirements

• 7+ years of experience in cloud security engineering and architecture, with advanced expertise in AWS, Azure, or Google Cloud Platform.
• Deep understanding of cloud security principles and best practices, with experience in managing cloud-native security tools.
• Extensive knowledge of fundamental security technologies, including firewalls, IDS/IPS, and encryption.
• Expertise with key tooling: CSPM, CNAPPs, CWPPs, and DSPM.
• Experience in securing and hardening cloud workloads, including containers and serverless architectures.
• Advanced experience with Infrastructure as Code (IaC) tools like Terraform and CloudFormation.
• High proficiency in programming or scripting languages for security automation solutions.
• Comprehensive understanding of cloud and network security across multiple environments.
• Demonstrated ability to perform in-depth security reviews of SaaS product architecture.
• Familiarity with compliance standards such as HIPAA and NIST 800-53.

Nice-to-haves

• Experience with CI/CD pipeline security integration.
• Strong leadership and communication skills for cross-functional collaboration.

Benefits

• Full medical, dental, and vision insurance + OneMedical membership
• Healthcare and Dependent Care FSA
• Commuter benefits
• 401(k)
• Flexible PTO
• Fitness reimbursement
• Paid maternity/parental leave
• Office snacks, coffee, and tea