Cloud Engineer, Security
At Included Health, security is central to the trust our members, customers, partners, and care teams place in us. We protect sensitive health information and the systems that support our products by building security into architecture, engineering practices, and day-to-day operations.
Our Security Engineering team works closely with platform engineering and product teams to build practical, scalable security controls, especially focused on our infrastructure-as-code. We focus on reducing risk through automation, secure-by-default patterns, strong technical partnerships, and controls that teams can operate in real production environments.
As a Cloud Engineer on the Security team, you’ll help mature Included Health’s cloud security posture across primarily AWS environments, with consideration for GCP. You’ll design, implement, and automate controls that protect product infrastructure and help prevent unauthorized Protected Health Information (PHI) exfiltration.
This is a full-time, remote role reporting to the Senior Manager, Security Engineering. We are open to considering candidates at both the Senior and Staff levels.
The role requires hands-on technical execution as well as the ability to influence infrastructure, DevOps, engineering, and product teams.
What You'll Do
- Design and automate cloud security controls across Identity & Access Management (IAM), authorization, Just-in-Time access, data access, and platform access.
- Improve AWS and GCP security posture through Terraform guardrails, risk roadmaps, legacy remediation, and secure infrastructure patterns.
- Build security tooling in Python, Go, and Lambda for vulnerability management, alerting, PHI logging, and cloud security workflows.
- Secure containers, workloads, and CI/CD pipelines through practical controls teams can operate in production.
- Partner with infrastructure, DevOps, engineering, and product teams on sensitive-data handling, incident response, and secure platform initiatives.
- Document controls, standards, automation, and playbooks that help teams adopt secure workflows.
Who You Are
You are a practical, hands-on cloud security engineer who can bring structure to ambiguous risks or control gaps without waiting for perfect clarity. You clarify the desired outcome, trust boundaries, stakeholders, constraints, and available facts, then make a reasonable first move and adapt as you learn.
You are comfortable going deep in code, cloud APIs, logs, identity policies, network traffic, CI/CD pipelines, and infrastructure configuration. You use evidence to test hypotheses and turn findings into durable fixes, reusable automation, clear documentation, or repeatable processes.
You build trust through preparation, responsiveness, direct communication, technical credibility, and follow-through. You listen to operational realities, explaining risks and tradeoffs clearly, and work with teams toward practical controls they can operate in production.
You take ownership through the full loop: coordination, escalation, validation, closure, and knowledge sharing. You know when to investigate independently, when to involve the right expertise, and when broader organizational alignment is needed.
What You Bring
- 5+ years of hands-on cloud security experience, with deep AWS expertise and familiarity with GCP.
- Strong technical depth across cloud infrastructure, identity, authorization, networking, containers, CI/CD, logging, monitoring, and security operations.
- Experience building security automation and infrastructure tooling in Python, Go, Terraform, and cloud-native services.
- Experience designing and operating access controls, including RBAC, ABAC, policy-as-code, granular engineering access, and Just-in-Time access.
- Familiarity applying cloud security frameworks, HIPAA requirements, and related standards to production environments.
- Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related field.
The United States new hire base salary target ranges for this full-time position are:
- Zone A: $130,050–$249,930 + equity + benefits
- Zone B: $143,055–$274,923 + equity + benefits
- Zone C: $156,060–$299,616 + equity + benefits
- Zone D: $169,065–$324,909 + equity + benefits
Skills
As published by lever · 8 questions · 1 written answer
Basics
Resume/CV, Full name, Email, Phone, Current location, Current company, LinkedIn URL, Other website
Short answers (1)
- Please enter your zip code:
Pick from a list (6)
- Are you legally authorized to work in the U.S.?
- Will you now or in the future require sponsorship for employment visa status (e.g. H-1B status)?
- Have you previously worked for Grand Rounds, Included Health, or Doctor on Demand as a permanent or temporary employee?
- I acknowledge that all information regarding the company, including its business, products, services, financial data, and trade secrets, disclosed during the interview process is confidential. I agree not to disclose, use, or reproduce this information except to evaluate employment with the company. I understand and agree that this confidentiality obligation is legally binding and remains in effect indefinitely, regardless of whether I am offered or accept a position.
- Do you consent to receive text (SMS) communications from Included Health recruiters regarding this application and related job‑relevant updates? Opting in does not guarantee that you will be contacted via text. Message Frequency will vary. Msg & data rates may apply. Reply HELP for help or STOP to cancel. optional
- Do you have at least 7 years of experience shipping code?
Written answers (1)
- What is the most recent project you worked on where you had to ship code? When was it, what language did you use, and what were you working on?