About the position:

Stellar Health is looking for a Senior Cloud Security Engineer to partner with our DevOps, Data, and Engineering teams to design and maintain our Cloud Security program across our internal environment and customer-facing platform. We are looking for an engineer that is passionate about designing a program that prioritizes both threat detection and visibility through monitoring and infrastructure as code to help our Engineering teams categorize risks and threats across Stellar Health’s cloud environments.

• Partner with our DevOps and Engineering teams to determine when and how CI/CD testing is leveraged to validate the configurations and controls of our infrastructure deployments into the cloud (specifically AWS).
• Own Stellar Health's Cloud Security Monitoring program and its priorities around improving visibility and threat detection within our cloud environments.
• Collaborate with our Engineering & Security leadership to ensure our threat model prioritizes the right threats, aligns to leading security practices, and business objectives.
• Drive the prioritization of vulnerability remediation within our cloud infrastructure in our DevOps and Engineering roadmap.

• Worked as a security engineer in a cloud environment, preferably AWS, for at least 3-4 years.
• 1-2 years of direct coding experience either through infrastructure as code or solving security automation problems.
• Passion for researching and building automated processes that help Engineers design secure-by-design cloud infrastructure with only targeted manual security reviews.
• Familiarity with securing and working with compliance teams on regulated data (HIPAA, PCI) or frameworks (HITRUST, FedRAMP, etc.).

• You are a builder and enjoy working with other builders cross-functionally.
• You are a security person that prefers guardrails vs gates.
• You enjoy coaching up and learning from your Engineering partners to strike the right balance between resilience and growth.
• Some projects you will work on could include:
• Work with the DevOps team to refine the automated build process for containers/servers to incorporate vulnerability scanning for base images.
• Design a new monitoring dashboard in our SIEM to enrich the cloud inventory (is this newly deployed container service publicly accessible?).
• Decide the best way to automatically demonstrate that encryption-at-rest is occurring in Stellar’s cloud environment.

Pay

At Stellar, we believe in transparency and we do our best to make sure the company and our candidates are on the same page as it relates to compensation. In addition to posting salary ranges for our open roles, candidates should expect to be asked about compensation expectations and requirements early on in their interview process. Our goal is to highlight when expectations and Stellar’s salary range may be out of sync, and work with the candidate to determine whether it makes sense to continue conversations. 

We are considering candidates with differing levels of expertise for this position. Leveling will be based upon your experience and performance in the interview process.

Where a new hire falls within a range will be based on their individual skills and experience, and how these competencies compare across other employees in the same role. Stellar's bands are designed to allow for individual compensation growth within the role. As such, new hires typically start at the lower end of the range. Stellar rewards performance and outcomes - should you join the company, you will have the opportunity to grow your salary over time.

• The salary range for a Senior Cloud Security Engineer l is $170,000 - $190,000 and will be eligible for an annual performance based bonus and equity grant
• The salary range for a Senior Cloud Security Engineer ll is $200,000 - $230,000 and will be eligible for an annual performance based bonus and equity grant