SalariesSign in
AboutPrivacyTerms
Cloud Security Operations Engineer (GCP/AWS) - Remote
Medable

Cloud Security Operations Engineer (GCP/AWS) - Remote

United StatesRemoteFull-time
Posted Sep 24
Apply

Job Description

Medable's mission is to get effective therapies to patients faster. We provide an end-to-end, agentic clinical trial platform with a flexible suite of tools that allows patients, healthcare providers, clinical research organizations and pharmaceutical sponsors to work together as a team in clinical trials. Our solutions enable more efficient clinical research, more effective healthcare delivery, and more accurate precision and predictive medicine. Our target audiences are patients, providers, principal investigators, and innovators who work in healthcare and life sciences.

Our vision is to accelerate the path to human discovery and medical cures. We are passionate about driving innovation and empowering consumers. We are proactive, collaborative, self-motivated learners, committed, bold and tenacious. We are dedicated to making this world a healthier place.

1. Responsibilities

  • Work cross-functionally with Information Security Operations and Infrastructure/DevOps teams, to administer and optimize security posture across multi-cloud (GCP/AWS) infrastructure, including native security services, IAM, logging, and threat detection.
  • Triage and respond to cloud security alerts and vulnerabilities; implement timely mitigations, configuration changes, and patches.
  • Own configuration and hygiene for cloud security consoles (examples: GCP Security Command Center, Cloud Logging, Cloud Armor, KMS, IAM, etc.).
  • Partner with DevOps to implement secure baseline configurations and guardrails (network segmentation, least privilege, encryption, key management, secrets handling, egress controls), in alignment with industry standard frameworks such as CIS, NIST 800-53, OWASP Top 10, etc.
  • Run day-to-day vulnerability workflows: detection, prioritization, remediation, and validation across cloud services, hosts, containers, and third-party dependencies.
  • Manage and harden security configurations for Kubernetes Engine environments, including:
    • Cluster and node security settings, RBAC, pod security controls, network policies, admission controls, and runtime security, Image vulnerability scanning, container supply-chain controls, patch cadence and version lifecycle management for clusters/nodes and supporting components.
  • Support secure implementations/integrations of AI within cloud infrastructure, including:
    • Data protection controls (PII/PHI handling, encryption, retention, audit logging).
    • Network controls (private connectivity where feasible, egress restrictions, proxying, allowlists).
    • Usage monitoring, abuse prevention, and security reviews for AI-driven features/workflows.
    • Contributing to internal AI security standards (prompt/data handling guidance, logging strategy, third-party risk considerations).
  • Work cross-functionally with IS Risk and Compliance team to produce evidence and reporting to support internal security requirements and external compliance obligations (e.g., SOC 2 / ISO-aligned controls, healthcare and privacy expectations).
  • Participate in security incident response for cloud-related events, including containment and recovery actions.
  • Other duties as assigned.

2. Experience

  • 4+ years of hands-on experience in cloud security, DevSecOps, cloud engineering with security focus, or security operations in cloud environments or a combination of education and experience.
  • Experience in healthcare technology and/or regulated environments (privacy, audit evidence, security control documentation).
  • Practical experience administering security controls in GCP and AWS (IAM, logging, encryption/KMS, network security, cloud security services).
  • Experience securing Kubernetes environments, including RBAC, cluster hardening, workload controls, and patch/version management.
  • Strong vulnerability management experience (triage, remediation coordination, patching workflows, validation).
  • Experience supporting secure integrations of LLM/AI services (e.g., ChatGPT/Grok) in production systems, including data governance and key management.

3. Skills

  • Ability to work cross-functionally between InfoSec and Infrastructure/DevOps, and translate security requirements into implementable controls.
  • Comfort working from tickets/alerts through to implemented changes in production cloud environments.
  • Comfortable writing code in any one programming language: Javascript/Python/Bash.
  • Familiarity with Infrastructure-as-Code and automation concepts (Terraform/CloudFormation, CI/CD pipelines, scripting).

4. Education, Certifications, Licenses

  • Bachelor's degree in Cybersecurity, Information Technology, Computer Science or a related field preferred.
  • Security certifications (one or more): GCP Professional Cloud Security Engineer, CISSP, CCSP, Security+.

5. Travel Requirements

As required.

At Medable, we believe that our team of Medaballers is our greatest asset. That is why we are committed to your personal and professional well-being. Our rewards are more than just benefits - they demonstrate our commitment to providing an inclusive, healthy and rewarding experience for all our team members.

Flexible Work

  • Remote from the start, we believe in a flexible employee experience

Compensation

  • Competitive base salaries

  • Annual performance-based bonus

  • Stock options for employees, aligning personal achievements to Medable's success

Health and Wellness

  • Comprehensive medical, dental, and vision insurance coverage

  • Carrot Fertility Program

  • Health Saving Accounts (HSA) and Flexible Spending Accounts (FSA)

  • Wellness program (Mental, Physical and Financial)

Recognition

  • Peer-to-peer recognition program, celebrating achievements and milestones

Community Involvement

  • Volunteer time off to support causes you care about

Medable is committed to providing reasonable accommodations for qualified individuals with disabilities in our job application procedures. If you need assistance or would like to request an accommodation due to a disability, please contact us .

Originally posted on Himalayas

View job

Cybersecurity Software Engineer

Meridian Bioscience

  • United States
  • Remote
Apply
Sep 25
View job
P

Cybersecurity Analyst

PurpleBox, Inc.

  • United States
  • Remote
  • Full-time
Apply
Sep 25
View job

Senior Software Engineer, Security Products

DigitalOcean

  • United States
  • Remote
  • Full-time
Apply
Sep 25
View job

Director of Cyber Security

EZCORP

  • United States
  • Remote
  • Full-time
Apply
Sep 25
View job

Information Security Analyst I

Camden National Bank

  • India
  • Remote
  • Full-time
Apply
Sep 25
View job

Security and Compliance Engineer

Genesis Consulting Partners, LLC

  • United States
  • Remote
  • Full-time
Apply
Sep 25
View job

Specialist Security Engineer Cybersecurity Engineering

Caesars Entertainment

  • United States
  • Remote
  • Full-time
Apply
Sep 25
View job

Group Security & Compliance Manager ($60,000/year USD), Sparkrock

Sparkrock

  • Argentina
  • Remote
  • Full-time
Apply
Sep 25
View job

Information Security Engineer

eTrepid

  • United States
  • Remote
  • Full-time
Apply
Sep 25
View job
A

IT Security Manager

Avento Group

  • Worldwide
  • Remote
  • Part-time
Apply
Sep 25
View job

Senior Product Security Engineer

AlphaSense

  • Ireland
  • Remote
  • Full-time
Apply
Sep 25
View job
C

GRC Engineer

Clerk

  • Remote
  • Full-time
Apply
Sep 25
View job

Threat Intelligence Data Engineer

HEROIC

  • India
  • Remote
  • Full-time
Apply
Sep 25
View job

SAP Basis Consultant and Security Consultant (8 Month)

Müller`s Solutions

  • United Arab Emirates
  • Remote
  • Full-time
Apply
Sep 25
View job

Senior Security Engineer

Incognia

  • Brazil
  • Remote
  • Full-time
Apply
Sep 25
View job

Senior Security Engineer - Threat Detection

Samsara

  • Canada
  • Remote
  • Full-time
Apply
Sep 25
View job

Principal Identity Engineer

Hard Rock Digital

  • Worldwide
  • Remote
  • Full-time
Apply
Sep 25
View job

Senior Product Security Engineer

AlphaSense

  • United Kingdom
  • Remote
  • Full-time
Apply
Sep 25
View job

Security GRC Analyst

Protective

  • United States
  • Remote
  • Full-time
Apply
Sep 24
View job

Information Security Compliance Coordinator

Contact Government Services

  • United States
  • Remote
  • Part-time
Apply
Sep 24
View job

AI and Cloud Security Analyst

TD SYNNEX

  • India
  • Remote
  • Full-time
Apply
Sep 24
View job

Sr Director Analyst, Cyber GRC Tools and Technology (Remote Europe)

Gartner

  • United Kingdom
  • Remote
  • Full-time
Apply
Sep 24
View job

Product Security Engineer

Action1

  • Serbia
  • Remote
  • Full-time
Apply
Sep 24
View job
S

Security Engineer - Detection and Response

Spotify

  • New York, NY
  • Remote
Apply
Sep 24
View job

Principal Data Engineer - Global Cybersecurity Data & Analytics

Liberty Mutual

  • United States
  • Remote
  • Full-time
Apply
Sep 24
View job

Sr. Manager, Security — Continuous Monitoring v 2.0

Databricks

  • United States
  • Remote
  • Full-time
Apply
Sep 24
View job

AI Software Engineer - Identity Recovery (Canada)

Quest Software

  • Canada
  • Remote
  • Full-time
Apply
Sep 24
View job

Platform Security Engineer (Tanium/Sentinel)

NCC Group

  • United Kingdom
  • Remote
  • Contract
Apply
Sep 24
View job

Cloud Security Operations Engineer (GCP/AWS) - Remote

Medable

  • United States
  • Remote
  • Full-time
Apply
Sep 24
View job

Staff Security Engineer, Proactive Security - Dasher

Doordash

  • United States
  • Remote
  • Full-time
Apply
Sep 24
PreviousPage 94 of 128Next
Medable

Cloud Security Operations Engineer (GCP/AWS) - Remote

United StatesRemoteFull-time
Posted Sep 24
Apply

Job Description

Medable's mission is to get effective therapies to patients faster. We provide an end-to-end, agentic clinical trial platform with a flexible suite of tools that allows patients, healthcare providers, clinical research organizations and pharmaceutical sponsors to work together as a team in clinical trials. Our solutions enable more efficient clinical research, more effective healthcare delivery, and more accurate precision and predictive medicine. Our target audiences are patients, providers, principal investigators, and innovators who work in healthcare and life sciences.

Our vision is to accelerate the path to human discovery and medical cures. We are passionate about driving innovation and empowering consumers. We are proactive, collaborative, self-motivated learners, committed, bold and tenacious. We are dedicated to making this world a healthier place.

1. Responsibilities

  • Work cross-functionally with Information Security Operations and Infrastructure/DevOps teams, to administer and optimize security posture across multi-cloud (GCP/AWS) infrastructure, including native security services, IAM, logging, and threat detection.
  • Triage and respond to cloud security alerts and vulnerabilities; implement timely mitigations, configuration changes, and patches.
  • Own configuration and hygiene for cloud security consoles (examples: GCP Security Command Center, Cloud Logging, Cloud Armor, KMS, IAM, etc.).
  • Partner with DevOps to implement secure baseline configurations and guardrails (network segmentation, least privilege, encryption, key management, secrets handling, egress controls), in alignment with industry standard frameworks such as CIS, NIST 800-53, OWASP Top 10, etc.
  • Run day-to-day vulnerability workflows: detection, prioritization, remediation, and validation across cloud services, hosts, containers, and third-party dependencies.
  • Manage and harden security configurations for Kubernetes Engine environments, including:
    • Cluster and node security settings, RBAC, pod security controls, network policies, admission controls, and runtime security, Image vulnerability scanning, container supply-chain controls, patch cadence and version lifecycle management for clusters/nodes and supporting components.
  • Support secure implementations/integrations of AI within cloud infrastructure, including:
    • Data protection controls (PII/PHI handling, encryption, retention, audit logging).
    • Network controls (private connectivity where feasible, egress restrictions, proxying, allowlists).
    • Usage monitoring, abuse prevention, and security reviews for AI-driven features/workflows.
    • Contributing to internal AI security standards (prompt/data handling guidance, logging strategy, third-party risk considerations).
  • Work cross-functionally with IS Risk and Compliance team to produce evidence and reporting to support internal security requirements and external compliance obligations (e.g., SOC 2 / ISO-aligned controls, healthcare and privacy expectations).
  • Participate in security incident response for cloud-related events, including containment and recovery actions.
  • Other duties as assigned.

2. Experience

  • 4+ years of hands-on experience in cloud security, DevSecOps, cloud engineering with security focus, or security operations in cloud environments or a combination of education and experience.
  • Experience in healthcare technology and/or regulated environments (privacy, audit evidence, security control documentation).
  • Practical experience administering security controls in GCP and AWS (IAM, logging, encryption/KMS, network security, cloud security services).
  • Experience securing Kubernetes environments, including RBAC, cluster hardening, workload controls, and patch/version management.
  • Strong vulnerability management experience (triage, remediation coordination, patching workflows, validation).
  • Experience supporting secure integrations of LLM/AI services (e.g., ChatGPT/Grok) in production systems, including data governance and key management.

3. Skills

  • Ability to work cross-functionally between InfoSec and Infrastructure/DevOps, and translate security requirements into implementable controls.
  • Comfort working from tickets/alerts through to implemented changes in production cloud environments.
  • Comfortable writing code in any one programming language: Javascript/Python/Bash.
  • Familiarity with Infrastructure-as-Code and automation concepts (Terraform/CloudFormation, CI/CD pipelines, scripting).

4. Education, Certifications, Licenses

  • Bachelor's degree in Cybersecurity, Information Technology, Computer Science or a related field preferred.
  • Security certifications (one or more): GCP Professional Cloud Security Engineer, CISSP, CCSP, Security+.

5. Travel Requirements

As required.

At Medable, we believe that our team of Medaballers is our greatest asset. That is why we are committed to your personal and professional well-being. Our rewards are more than just benefits - they demonstrate our commitment to providing an inclusive, healthy and rewarding experience for all our team members.

Flexible Work

  • Remote from the start, we believe in a flexible employee experience

Compensation

  • Competitive base salaries

  • Annual performance-based bonus

  • Stock options for employees, aligning personal achievements to Medable's success

Health and Wellness

  • Comprehensive medical, dental, and vision insurance coverage

  • Carrot Fertility Program

  • Health Saving Accounts (HSA) and Flexible Spending Accounts (FSA)

  • Wellness program (Mental, Physical and Financial)

Recognition

  • Peer-to-peer recognition program, celebrating achievements and milestones

Community Involvement

  • Volunteer time off to support causes you care about

Medable is committed to providing reasonable accommodations for qualified individuals with disabilities in our job application procedures. If you need assistance or would like to request an accommodation due to a disability, please contact us .

Originally posted on Himalayas