Cloud Security Engineer (ClearDATA)

Cleerly is a healthcare company developing AI-driven precision diagnostic solutions to improve the prevention and treatment of heart disease. The Cloud Security Engineer will design, build, and secure cloud infrastructure while embedding infrastructure-as-code security controls, automated compliance scanning, and cloud configuration hardening across cloud environments. The role will also support cloud security posture management, incident response, vulnerability remediation, and secure-by-design architecture.

Responsibilities:

• Monitor and analyze cloud-specific threat landscapes; proactively identify and mitigate risks related to public cloud service misconfigurations
• Maintain cloud security posture by monitoring and triaging alerts from CSPM (Cloud Security Posture Management) and cloud-native security tools; conduct forensic investigations
• Work in a cross function capacity with our DevOps team to automate security monitoring and alerting solutions directly into the CI/CD pipeline using Infrastructure-as-Code
• Integrate automated vulnerability scanning and security testing directly into the development lifecycle to ensure continuous security feedback for engineering teams
• Coordinate cross-functional teams for vulnerability remediation efforts
• Design and audit cloud-native security controls to ensure continuous compliance and adherence to regulatory frameworks (HIPAA, HITRUST, SOC)
• Proactively monitor and evaluate security configurations of systems and applications for continuous improvement and compliance
• Participate in the full security incident response lifecycle, including containment, eradication, and recovery
• Partner with software engineering teams to provide security design consultation, embedding secure-by-design principles into cloud architecture and application features

Requirements:

• 5 to 8+ years of dedicated Security Engineering experience with a strong focus on AWS security, cloud-native architecture, and DevSecOps
• Demonstrated experience building and architecting security infrastructure from the ground up, serving as the primary architect and functional owner of the security domain
• Proven track record implementing cloud-native security tooling (e.g., CSPM, CWPP) and embedding automated security controls into CI/CD deployment pipelines
• Proficiency in Python, Terraform, and Containerization strategies such as Kubernetes and Docker
• Strong understanding of SaaS risk management and hardening processes as well as experience in DLP implementations and management
• Previous experience working within a startup environment, with excellent verbal and written communication skills to address security concerns across internal stakeholders
• CISSP, CNAPP, or related certifications
• Experience in development or implementation of new tooling using the latest available resources or technologies
• Experience implementation or use of CSPM tools such as Wiz, Orca, or AWS security tools suite
• Experience with implementation and tuning of SIEM and event management tools
• Experience in the digital healthcare industry