Lead Site Reliability Engineer/SRE - Security Engineering

As a Lead Site Reliability Engineer/SRE - Security Engineering, your background as an engineer will enable us to implement security solutions across a variety of applications and systems, ensuring that our infrastructure and data are protected against the most sophisticated threats. You will spearhead the implementation of security practices across multiple cloud platforms.We're looking for a candidate who not only possesses a broad technical security knowledge but also specializes in several areas of deep expertise. Your ability to lead, influence, and communicate clearly will be vital. You should be naturally comfortable explaining complex risks to both technical and non-technical stakeholders, bridging gaps in understanding, and guiding teams toward secure solutions with a balance of firm expertise and diplomatic skill.Responsibilities:• Design, develop, and manage security controls within the cloud architecture using best practices and advanced cloud security solutions.• Collaborate with IT and Engineering teams to integrate security measures with existing infrastructure while ensuring continuous delivery and minimal service interruptions.• Stay updated with the latest in cloud technology and security advancements to anticipate and guard against new threats.• Provide leadership and mentorship to a team of cloud security professionals, promoting a culture of security awareness and continuous improvement.• Manage the response to security incidents and breaches, including the investigation of such events and the coordination of forensic analysis and remediation efforts.Qualifications:• You bring over five years of experience in Site Reliability Engineering, DevOps or similar roles, complemented by three years in Security Engineering within enterprise production environments.• You have a Bachelor’s or Master’s degree in Information Security, Computer Science, or a related field, or equivalent professional experience• You ideally hold relevant professional certifications such as AWS Certified Solutions Architect, Certified Kubernetes Application Developer, SANS FOR509, SANS SEC541 or other similar cloud native or cloud security certifications.Technical Expertise:• You have extensive experience with AWS, Azure, and GCP cloud services, including experience with automating operations, engineering scalability architecture, and deep understanding of network architecture. You are well-versed in AWS cloud-native infrastructure and services such as EC2, S3, EKS, ECR and others.• You have over five years of hands-on experience in Linux environments and are skilled in Infrastructure as Code languages (Terraform), scripting (Python/Go), source code management, CI/CD platforms, and performance analysis.• Experience aligning engineering processes with security requirements and best practices.• You have implemented best practices for container orchestration to protect against vulnerabilities and ensure the isolation and security of containerized applications.• You have experience working in an environment that adheres to standards such as SOX, ISO 27001, NIST, SOC 2. Experience with HIPAA and HITRUST is desirable but not required.Leadership Experience:• You possess demonstrated leadership skills with the ability to manage and mentor a team of security professionals. You are an effective communicator and worked closely with cross functional teams to implement security outcomes.• You have excellent problem-solving skills with a strategic mindset that allows you to think methodically and execute plans effectively.The United States new hire base salary target ranges for this full-time position are:Zone A: [156,200 - 232,400] + equity + benefitsZone B: [130,200-193,650] + equity + benefitsThis range reflects the minimum and maximum target for new hire salaries for candidates based on their respective Zone. Below is additional information on Included Health's commitment to maintaining transparent and equitable compensation practices across our distinct geographic zones. Starting base salary for the successful candidate will depend on several job-related factors, unique to each candidate, which may include, but not limited to, education; training; skill set; years and depth of experience; certifications and licensure; business needs; internal peer equity; organizational considerations; and alignment with geographic and market data. Compensation structures and ranges are tailored to each zone's unique market conditions to ensure that all employees receive fair and competitive compensation based on their roles and locations. Your Recruiter can share details of your geographic alignment upon inquiry.In addition to receiving a competitive pay, the compensation package may include, depending on the role, the following:-Remote-first culture-401(k) savings plan through Fidelity-Comprehensive medical, vision, and dental coverage through multiple medical plan options (including disability insurance)-Full suite of Included Health telemedicine (e.g. behavioral health, urgent care, etc.) and health care navigation products and services offered at no cost for employees and dependents-Generous Paid Time Off ("PTO") and Discretionary Time Off (“DTO")-12 weeks of 100% Paid Parental leave-Up to $25,000 Fertility and Family Building Benefit Compassionate Leave (paid leave for employees who experience a failed pregnancy, surrogacy, adoption or fertility treatment)-11 Holidays Paid with one Floating Paid Holiday-Work-From-Home reimbursement to support team collaboration and effective home office work-24 hours of Paid Volunteer Time Off (“VTO”) Per Year to Volunteer with Charitable OrganizationsYour recruiter will share more about the benefits package for your role during the hiring process.