Lead Cybersecurity Engineer

Cerbo · OptiMantra is a healthcare technology company providing purpose-built EHR and practice management platforms for diverse healthcare practices. The Lead Cybersecurity Engineer will lead and operate a unified cybersecurity program across both platforms, securing AWS environments and protected health information while overseeing compliance, security operations, incident response, vulnerability management, and customer-facing security activities.

Responsibilities:

• Own the technical implementation and ongoing management of the company’s SOC 2 Trust Services Criteria and HIPAA Security Rule requirements across AWS environments supporting Cerbo and OptiMantra, including control mapping, evidence collection, policy management, and continuous monitoring
• Lead compliance documentation and remediation efforts, including control narratives, system and data-flow documentation, scope determinations, and prioritization and closure of security and compliance gaps with supporting evidence
• Serve as the technical point of contact for auditors and assessors and drive the compliance workstream to completion, coordinating interviews, artifact requests, demonstrations, remediation activities, dependencies, and key audit milestones across teams
• Secure and harden production AWS environments across Cerbo and OptiMantra, including cloud infrastructure, Kubernetes and container environments, databases, networking, web application security, and disaster recovery environments
• Implement and operate AWS security controls and tooling, including IAM and privileged access management, MFA, least-privilege access, security monitoring, encryption and key management, vulnerability management, and audit logging
• Strengthen security across both platforms by establishing and advancing common standards for access, tenant isolation, data protection, backup and disaster recovery, and other cloud security controls, partnering with Engineering, DevOps, IT, and Product to implement and maintain these controls
• Establish and operate security monitoring and detection capabilities, including centralized logging, alerting, threat detection, and response processes tailored to the company’s clinical SaaS environment
• Own the security incident response and vulnerability management programs, including playbooks, tabletop exercises, breach assessment, vulnerability scanning, remediation tracking, and coordination with Engineering and external security providers
• Lead security testing and continuous improvement efforts, including penetration testing, DAST, security assessments, findings remediation, and retesting
• Own and maintain security policies, procedures, and workforce security programs across the combined organization, including security awareness, phishing simulations, HIPAA training, and compliance tracking
• Lead identity and endpoint security practices to protect corporate systems, users, and sensitive data, partnering with IT and Engineering to implement and continuously improve security controls
• Manage third-party security and vendor risk, including security assessments, business associate agreements, subprocessor diligence, and ongoing oversight of vendors that access or process PHI
• Serve as the technical security partner for customers and strategic partners, leading security questionnaires, architecture reviews, and security discussions with clinic IT and enterprise security teams
• Support customer and partner security requirements throughout the sales and contracting process, including security terms related to incident notification, data retention and export, backup and disaster recovery, AI, and subprocessors

Requirements:

• 5+ years of experience in cybersecurity or information security, with increasing responsibility in security engineering
• 2+ years of experience securing production cloud environments, preferably AWS, including cloud identity and access management, network security, logging/monitoring, and security controls
• Demonstrated experience with the AWS security ecosystem, including IAM, CloudTrail, GuardDuty, Security Hub, KMS, VPC security and related AWS security services
• Experience implementing, maintaining and evidencing security controls aligned with frameworks and standards such as NIST, HITRUST, ISO 27001, HIPAA, SOC 2, or similar
• Experience securing Kubernetes and containerized production environments, including identity, network security, image security, and runtime controls
• Experience serving as a technical owner during a third-party security audit, assessment, or certification
• Experience deploying, configuring, and operating cybersecurity tools in production, such as EDR, SIEM/log management, vulnerability management, WAF, or similar technologies
• Demonstrated ability to lead complex cybersecurity initiatives, establish security standards and processes, and serve as a technical subject-matter expert across the organization
• Bachelor's degree in cybersecurity, information security or relevant field
• Experience working in a PE-backed, high-growth, or rapidly scaling organization
• Experience working with healthcare technology, SaaS or other technology-enabled B2B businesses
• Experience securing multi-tenant SaaS environments, including tenant isolation, access controls, and shared infrastructure
• Experience working across cloud, DevOps, SRE, or application security environments, with exposure to infrastructure as code, CI/CD, Kubernetes, secure code practices, or vulnerability remediation