Senior Security Engineer

About IntusCare

IntusCare is a healthcare analytics and workflow platform built specifically for organizations that care for medically complex and socially vulnerable seniors, starting with Programs of All‑Inclusive Care for the Elderly (PACE). By unifying claims, clinical, and operational data, IntusCare helps care teams identify risk, visualize trends, and take action to improve outcomes, reduce avoidable hospitalizations, and strengthen financial performance.​

Senior Security Engineer (Cloud Guardrails)

As a Senior Security Engineer at IntusCare, you will design and implement the cloud security guardrails that keep our AWS and Azure environments safe by default. You will work closely with engineering and platform teams to embed identity, network, logging, and CI/CD controls into the way software is built and operated, rather than relying on ad‑hoc reviews and tickets. This role is ideal for a hands‑on security engineer who enjoys pairing with developers, building paved‑road patterns, and using automation to raise the bar on security without slowing delivery.​

What you’ll do

• Design and maintain opinionated “paved‑road” patterns for AWS and Azure (accounts/subscriptions, VPC/VNet, IAM/Entra ID, data stores) that teams can adopt with minimal friction.​

• Implement and continually improve baseline controls: IAM roles and policies, network segmentation, secrets management, encryption, endpoint and workload protections, and security logging/telemetry.​

• Build and tune CI/CD and IaC guardrails (e.g., checks for misconfigurations, policy‑as‑code, image and dependency scanning) so that insecure changes are caught before production.​

• Partner with engineering and SRE to ensure high‑value security events are captured, normalized, and routed into our detection and response workflows.​

• Collaborate with data, product, and compliance stakeholders to support HIPAA‑aligned practices and secure handling of PHI across services and integrations.​

• Contribute to security runbooks, playbooks, and documentation so teams know how to safely use platforms, patterns, and tools you create.​

What you’ll bring

• Significant hands‑on experience (typically 5+ years) in security engineering with a focus on cloud platforms, including production experience in AWS and working knowledge of Azure.​

• Strong practical skills in at least some of: Terraform or other IaC, Kubernetes/container security, CI/CD pipeline security, and cloud‑native security services (e.g., GuardDuty, Security Hub, Defender for Cloud).​

• Experience designing and operating baseline security controls at scale: IAM, network security (SGs/NSGs, firewalls, WAF), encryption, key management, and logging/monitoring.​

• Ability to work directly with product and platform engineers, explain trade‑offs clearly, and co‑design secure solutions that fit real‑world constraints.​

• Familiarity with security and compliance frameworks relevant to healthcare and cloud (for example, NIST, CIS, SOC 2, HIPAA, or HITRUST), and comfort applying them pragmatically.​

Nice to have

• Experience in healthtech, working with PHI, EMR/EHR systems, or risk‑based healthcare analytics.​

• Prior work with CNAPP/CSPM tooling, or building your own guardrails using policy‑as‑code.​

• Experience using AI/ML tools to improve security workflows, detection, or developer experience.​

Compensation, location, and eligibility

• Base salary: typically 170,000–190,000 USD, depending on experience and location, plus equity and benefits.​

• Location: Remote within the United States, with core collaboration hours aligned to U.S. time zones.​

• Work authorization: You must be authorized to work in the United States. At this time, IntusCare is unable to provide visa sponsorship or take over sponsorship for this role.​