Senior Cloud Security Engineer

Aidoc is hiring its first dedicated Cloud Security Engineer to join its R&D Security team. The role will shape cloud security standards, assess AWS and Kubernetes risks, build and verify security controls, and partner with engineering, DevOps, SecOps, and hospital IT to improve security across cloud services and hospital deployments.

Responsibilities:

• Assess AWS architecture and attack paths involving IAM role trust and permissions, networking, storage, encryption and secrets access. Recommend baselines and help engineering adopt controls appropriate to the workload
• Review Kubernetes security across access to the Kubernetes API, AWS access for workloads, admission controls, container settings and network isolation. Validate that controls work in the deployed environment
• Assess EC2 host and workload security and Lambda function security, including credential access and data protection. Review Lambda execution-role permissions and permissions to invoke functions as separate controls
• Review Terraform and AWS CDK changes, build preventive checks in CI, and verify deployed controls. Develop security automation in Python or shell and reusable guidance with infrastructure owners
• Assess cloud security scanner coverage and finding quality, validate exposures using configuration and runtime evidence, and define improvements with SecOps and DevOps. Drive agreed remediation and verify risk reduction
• Assess cloud-side access and connectivity for Aidoc applications in hospitals with AppSec, product teams and hospital IT. Help plan appropriate visibility for these deployments
• Plan control validation with engineering around clinical service availability. Track control adoption and recurring risks, support SecOps investigations, and provide technical evidence to Quality and Regulatory partners

Requirements:

• 5+ years of relevant experience in Cloud Security, Infrastructure Security, DevSecOps, DevOps or SRE, including hands-on production security improvements
• Built or substantially improved a cloud security practice: assessed risks, improved controls and coverage, gained engineering adoption, and verified remediation
• Strong practical AWS security across IAM, networking, storage, encryption, logging and workload access; ability to investigate and explain attack paths
• Hands-on production Kubernetes security experience, with sound Linux and networking fundamentals and an understanding of EC2 and serverless security boundaries
• Ability to review infrastructure as code in Terraform or AWS CDK, transfer that knowledge to the other framework, and build security automation and CI checks in Python or shell
• Clear communication in English and practical judgment about testing, staged rollout, rollback and verification of security changes
• Experience using cloud security scanners, Wiz, Upwind or comparable cloud and runtime security platforms to improve coverage and validate findings
• Policy as code, workload identity or security controls for build and deployment pipelines
• Customer-deployed software, hospital connectivity or other regulated environments with sensitive data