Senior Platform Security Engineer, SOC 2 / HIPAA

Atomic - Remote Jobs

. Design identity, authentication, authorization, secrets storage, and production-access controls .

Posted 10/22/2026full-timeRemote • United StatesSenior💰 $14,583 - $17,500 per monthWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in designing and implementing security, privacy, and compliance controls, particularly in cloud-native environments. Proficient in managing SOC 2 Type II and HIPAA requirements while leading incident investigations and threat modeling efforts.

Highest-signal resume keywords

SOC 2 Type II ExperienceHIPAA ComplianceCloud-Native Production ExperienceInfrastructure As CodeThreat Modeling

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Software EngineeringAuthentication DesignAuthorization ManagementSecrets ManagementAudit LoggingCI/CD PipelinesProduction Access ControlsIncident ResponseTechnical Roadmap DevelopmentNIST Requirements Translation

Soft Skills

Autonomous WorkCollaborationLeadershipCommunicationProblem-Solving

Tools & Technologies

AWSNode.jsTypeScriptInfrastructure-As-Code ToolsAudit Tools

Certifications & Qualifications

FedRAMPISO 27001

Industry Keywords

HealthcareFintechGovernmentProtected Health InformationContinuous Control Monitoring

Tech Stack

Tools & technologies

AWSCloudNode.jsTypeScript

About the role

Key responsibilities & impact

Design identity, authentication, authorization, secrets storage, and production-access controls
Write the architecture and code for security, privacy, and compliance controls
Define isolation between environments, tenants, workloads, and sensitive data
Build audit logs and change history suitable for external auditor testing
Maintain SOC 2 Type II and HIPAA technical controls
Automate access reviews and evidence collection
Close technical audit findings and work with auditors on testing
Build secure CI/CD release paths and infrastructure-as-code controls with production approvals
Publish shared modules and reference implementations
Run threat models for critical workflows and convert findings into engineering requirements
Review security-sensitive code, infrastructure, and architecture changes
Own engineering-side logging, detection, runbooks, and escalation paths
Lead or support incident investigation and containment
Participate in tabletop exercises with the Trust Product Manager and leadership
Translate NIST requirements into controls and priorities
Provide leadership with a technical roadmap for state and federal environments toward FedRAMP-aligned practices
Serve as senior engineer and technical lead for platform security, privacy, and compliance controls
Collaborate with the Trust Product Manager, Product leadership, Engineering leadership, auditors, and other engineers

Requirements

What you’ll need

7+ years of software engineering experience
A few years as the senior or lead engineer on production systems
Committed application and infrastructure code in the last year or two
Hands-on SOC 2 Type II and HIPAA experience, including implementing and operating controls through an audit
Experience building or operating a system holding protected health information
Cloud-native production experience, ideally on AWS
Experience with infrastructure as code and CI/CD pipelines with approval steps
Experience setting up production environments independently
Experience designing authentication, role- or attribute-based authorization, service identities, secrets management, production access controls, and audit logging
Threat modeling carried through to shipped controls
Experience closing audit, penetration-test, or incident findings
Ability to evaluate what to enforce in software versus process and explain the trade-off to product leads, auditors, and engineers
Ability to work autonomously while architecture and operating models are still taking shape
Must be based in the U.S.
Bonus: NIST 800-53 or other 800-series controls mapped to system changes
Bonus: FedRAMP or ISO 27001 experience
Bonus: Automated evidence collection or continuous control monitoring accepted by an auditor
Bonus: Incident-response runbooks or tabletop exercise experience
Bonus: Node, TypeScript, and AWS in the same production environment
Bonus: Software experience for government, healthcare, or fintech customers

Benefits

Comp & perks

Fully remote role within the U.S.
Full-time employment through an Employer of Record (EOR)
Real technical ownership of design decisions and control-building priorities
Direct collaboration with Product & Engineering leadership
Mission-driven impact protecting the data of families who rely on public benefits