Senior Cloud Security Engineer
About ComPsych
ComPsych Ⓡ is the worldwide leader in organizational mental health, well-being, and absence management, dedicated to igniting human potential in workplaces across the globe. For over 40 years, we have combined the best in technology with unmatched human expertise to help individuals and their organizations thrive. Our GuidanceResourcesⓇ and AbsenceResourcesⓇ solutions deliver end-to-end mental health, well-being, work-life, health navigation, and absence support to more than 75,000 customers worldwide, touching more than 160 million lives across 200 countries. Visit compsych.com to find out why 40% of the Fortune 500 choose ComPsych for their mental health and absence management needs.
About the Role
This is a fully remote role. ComPsych is modernizing how it secures the business as it migrates to the cloud and builds AI into its products, and the Senior Cloud Security Engineer is accountable for raising the bar across every security domain, network, application, cloud, data, and AI. The role covers the full security lifecycle, from designing controls, policy as code, and guardrails to directing AI assisted build and validation work, through owning detection, response, and vulnerability management, while keeping human judgment on what ships and how the team responds. Because ComPsych ’s platform carries behavioral health data for millions of members, this engineer helps ensure that security and privacy scale with the business rather than slowing it down. Candidates with different levels of experience and strong equivalent experience are encouraged to apply.
What You'll Do
-
Secure the cloud, by design and in code. Own cloud security posture management across configuration, workloads, and entitlements (CSPM, CWPP, and CIEM); identity and access management and least privilege, including federation and single sign on, secrets management, privileged access, and workload and non human identities; network segmentation; container security; encryption and key management; and guardrails delivered as policy as code across our cloud environments (AWS primary, Azure), so the secure path is the default for every team.
-
Build application security into the pipeline. Shift security left in CI/CD with static, dynamic, and dependency and software supply chain scanning, threat modeling, secrets management, and secure by design reviews, so product teams ship safely by default.
-
Engineer network security for a cloud first estate. Design segmentation and zero trust access, firewalls and web application firewalls, and traffic inspection across cloud and hybrid networks, automated and observable rather than manually maintained.
-
Protect the data and engineer privacy in. Lead data classification, encryption and tokenization, key management, and data loss prevention, with privacy by design for PHI and ePHI and awareness of data residency and cross border handling across our domestic and international footprint.
-
Secure the AI systems we build. Design guardrails, data protection, and abuse and misuse controls for AI, machine learning, and generative AI, addressing risks like prompt injection, model and data poisoning, and sensitive data leakage, and build the monitoring to catch them.
-
Own detection, response, and vulnerability management. Tune SIEM and cloud native detections, drive event correlation and incident response, run vulnerability scanning and coordinate penetration testing, and turn findings into fixes with real remediation timelines.
-
Advance information security and make secure the easy default. Maintain security baselines and configuration compliance, and the controls, logging, and audit evidence that keep us compliant, coaching engineers across teams rather than gatekeeping.
- Perform other duties as assigned
What We're Looking For
- Education: Bachelor’s degree in Computer Science or a related field; security certifications such as CISSP or a cloud security specialty are a plus.
-