Senior Cloud Security Engineer - Cohere Health

Cohere Health is illuminating healthcare for patients, their doctors, and all those who are important in a patient’s healthcare experience, both in and out of the doctors office.  Founded in August, 2019, we are obsessed with eliminating wasteful friction patients and doctors experience in areas that have nothing to do with health and treatment, particularly for diagnoses that require expensive procedures or medications.  To that end, we build software that is expressly designed to ensure the appropriate plan of care is understood and expeditiously approved, so that patients and doctors can focus on health, rather than payment or administrative hassles.

Opportunity Overview:

As we continue to expand our cloud-based services, security is a top priority. We are seeking a highly skilled and experienced Senior Cloud Security Engineer to join our dynamic team. The successful candidate will play a critical role in ensuring the security, integrity, and compliance of our cloud infrastructure. This is an exciting opportunity for an individual who thrives in a fast-paced, collaborative environment and is passionate about implementing and enhancing cloud security measures.

Last but not least: People who succeed here are empathetic teammates who are candid, kind, caring, and embody our core values and principles. We believe that diverse, inclusive teams make the most impactful work. Cohere is deeply invested in ensuring that we have a supportive, growth-oriented environment that works for everyone.

What you will do:

• Cloud Security Expertise:

o Demonstrate advanced proficiency in cloud security, particularly within AWS environments.

o Stay abreast of the latest AWS security services, tools, and best practices.

• HIPAA Compliance:

o Implement and manage robust security controls to ensure compliance with HIPAA regulations.

o Conduct regular audits to assess and enhance the effectiveness of HIPAA-related security measures.

• Security Architecture:

o Design and implement secure architectures for cloud-based applications, focusing on encryption, identity management, monitoring, alerting, detection network security, and data protection.

• Incident Response:

o Develop and maintain an incident response plan for cloud security breaches.

o Lead investigations, coordinate with cross-functional teams, and ensure timely resolution of security incidents.

• Security Tooling:

o Select, implement, and manage security tools such as SIEM, IDS/IPS to monitor, detect, and respond to security threats within the cloud environment.

• Security Policy and Governance:

o Define and enforce cloud security policies, standards, and guidelines.

o Ensure alignment with industry best practices and regulatory requirements.

• Security Awareness and Training:

o Conduct training programs for internal teams to promote cloud security best practices and policies.

• Collaboration:

o Work closely with cross-functional teams, including DevOps, engineering, and IT, to integrate security practices into development and deployment processes.

• Documentation:

o Maintain detailed documentation of security configurations, policies, and procedures to support auditing and compliance requirements.

o Strong familiarity with change management processes

• Security Audits and Assessments:

o Perform security assessments and audits to identify vulnerabilities and areas for improvement.

o Collaborate with internal and external auditors to ensure compliance.

• Qualifications:

o Bachelors degree in Computer Science, Information Security, or related field.

o Knowledge of HIPAA regulations and experience implementing compliance measures.

o Relevant certifications such as AWS Certified Security/Architect - Specialty, CISSP, or CCSP are a plus.

• Problem-solving Skills:

o Demonstrate strong analytical and problem-solving skills to address complex security challenges.

• Team Collaboration:

o Work effectively in a team environment while also having the ability to operate independently.

• Communication:

o Communicate effectively with technical and non-technical stakeholders.

• Continuous Learning:

o Exhibit a commitment to continuous learning and professional development in the dynamic field of cloud security.

Your background & requirements:

• Education: Bachelors degree in Computer Science, Information Security, or a related field. Advanced degree preferred.

• Experience: 5-7 years of proven experience in cloud security.

• Certifications: Relevant certifications such as AWS Certified Security - Specialty, Certified Information Systems Security Professional (CISSP), or Certified Cloud Security Professional (CCSP) are highly desirable.

• HIPAA Knowledge: In-depth understanding of HIPAA regulations and experience implementing security measures to ensure compliance.

• Technical Proficiency: Demonstrated expertise in security tools and technologies, including SIEM, IDS/IPS, WAF, IAM and vulnerability assessment tools.

• Problem-solving Skills: Strong analytical and problem-solving skills to address complex security challenges.

• Team Collaboration: Ability to work effectively in a collaborative team environment and lead security initiatives.  Especially DevOps, Infrastructure, and Engineering teams.

• Communication: Excellent communication skills with the ability to convey complex security concepts to both technical and non-technical stakeholders.

• Continuous Learning: Commitment to staying updated on the latest developments in cloud security and a proactive approach to continuous learning.

We can’t wait to learn more about you and meet you at Cohere Health!

Equal Opportunity Statement: 

Cohere Health is an Equal Opportunity Employer. We are committed to fostering an environment of mutual respect where equal employment opportunities are available to all.  To us, it’s personal.

The salary range for this position is $120,000 to $150,000 annually; as part of a total benefits package which includes health insurance, 401k and bonus. In accordance with state applicable laws, Cohere is required to provide a reasonable estimate of the compensation range for this role. Individual pay decisions are ultimately based on a number of factors, including but not limited to qualifications for the role, experience level, skillset, and internal alignment.