Job description

About Cleerly We’re Cleerly – a healthcare company that’s revolutionizing how heart disease is diagnosed, treated, and tracked. We were founded in 2017 by one of the world’s leading cardiologists and are a growing team. Most of our teams work remotely and have access to our offices in Denver, Colorado, New, York, New York, Dallas, Texas, and Lisbon, Portugal with some roles requiring you to be on-site in a location. Cleerly has created a new standard of care for heart disease through value-based, AI-driven precision diagnostic solutions with the goal of helping prevent heart attacks. Our technology goes beyond traditional measures of heart disease by enabling comprehensive quantification and characterization of atherosclerosis, or plaque buildup, in each of the heart arteries. Cleerly’s solutions are supported by more than a decade of performing some of the world’s largest clinical trials to identify important findings beyond symptoms that increase a person’s risk of heart attacks. At Cleerly, we collaborate digitally and use a wide variety of systems. Our people use Google Workspace (GMail, Drive, Docs, Sheets, Slides), Slack, Confluence/Jira, and Zoom Video, prior experience in these areas is a plus. Role or department specific technology needs may vary and will be listed as requirements in the job description. While we are mostly a remote company, travel is required for some team meetings and cross function projects typically once per month or once per quarter, for some roles like sales or external facing roles travel could be up to 90% of the time. Cleerly is committed to providing safe and effective medical software that meets customer needs and our intended use. The adherence to all applicable regulatory and statutory requirements establishes a clear framework for setting measurable quality objectives. Our commitment to continually improving our products and processes proactively manages risks, ensuring ongoing compliance throughout the entire software lifecycle. Understanding this role's relevance and importance is critical to achieving Cleerly's quality objectives. Job Description Our Security team is growing and we have an immediate opening for a Cloud Security Engineer with a strong focus on cloud-native security architecture and design. In this role, you will lead the effort to design, build, and secure our cloud infrastructure, establish robust cloud architecture security standards, and implement infrastructure-as-code (IaC) security controls directly across our cloud environments. Reporting to the Director of IT and IS, this role will be a multi-faceted function that assists in maintaining cloud posture, executing core cloud security functions, and acting as a technical expert in architecting secure, scalable cloud systems. The ideal candidate is a self-motivated individual that is great at task and time management, and is excited to build cloud security directly into our infrastructure from the ground up. What would I be doing? As a key member of the Security team, you will collaborate closely with engineering and security leadership to design, build, and maintain secure cloud architecture. You will drive cloud-native security initiatives by embedding infrastructure-as-code (IaC) security controls, automated compliance scanning, and cloud configuration hardening across all environments, serving as a cross-functional partner to ensure robust security throughout our cloud ecosystem. On any given day you could be: Monitor and analyze cloud-specific threat landscapes; proactively identify and mitigate risks related to public cloud service misconfigurations. Maintain cloud security posture by monitoring and triaging alerts from CSPM (Cloud Security Posture Management) and cloud-native security tools; conduct forensic investigations. Work in a cross function capacity with our DevOps team to automate security monitoring and alerting solutions directly into the CI/CD pipeline using Infrastructure-as-Code. Integrate automated vulnerability scanning and security testing directly into the development lifecycle to ensure continuous security feedback for engineering teams. Coordinate cross-functional teams for vulnerability remediation efforts. Design and audit cloud-native security controls to ensure continuous compliance and adherence to regulatory frameworks (HIPAA, HITRUST, SOC). Proactively monitor and evaluate security configurations of systems and applications for continuous improvement and compliance. Participate in the full security incident response lifecycle, including containment, eradication, and recovery. Partner with software engineering teams to provide security design consultation, embedding secure-by-design principles into cloud architecture and application features. Qualifications 5 to 8+ years of dedicated Security Engineering experience with a strong focus on AWS security, cloud-native architecture, and DevSecOps Demonstrated experience building and architecting security infrastructure from the ground up, serving as the primary architect and functional owner of the security domain Proven track record implementing cloud-native security tooling (e.g., CSPM, CWPP) and embedding automated security controls into CI/CD deployment pipelines Proficiency in Python, Terraform, and Containerization strategies such as Kubernetes and Docker Strong understanding of SaaS risk management and hardening processes as well as experience in DLP implementations and management Previous experience working within a startup environment, with excellent verbal and written communication skills to address security concerns across internal stakeholders Impress us more CISSP, CNAPP, or related certifications Experience in development or implementation of new tooling using the latest available resources or technologies Experience implementation or use of CSPM tools such as Wiz, Orca, or AWS security tools suite Experience with implementation and tuning of SIEM and event management tools Experience in the digital healthcare industry The base salary range for this role varies by location and is aligned to market benchmarks. Candidates located in higher-cost labor markets , including California, Washington, New York, New Jersey, Connecticut, Massachusetts, and Washington, DC represent the middle to high end of the range, while candidates located in all other U.S. locations represent the low to middle end of the range. Final compensation is determined based on location, experience, skills, and internal equity. This role is eligible for a 10 % target annual bonus , resulting in the following base salary and Total Target Compensation (TTC) ranges: Base Salary: $125,000 - $175,000 *Total Target Compensation (TTC): Total Cash Compensation (including base pay, variable pay, commission, bonuses, etc.) Additionally, stock options, paid benefits, and employee perks are part of your total rewards. Working at Cleerly takes HEART. Discover our Core Values: H: Humility - be a servant leader E: Excellence - deliver world-changing results A: Accountability - do what you say; expect the same from others R: Remarkable - inspire & innovate with impact T: Teamwork - together we win Don’t meet 100 percent of the qualifications? Apply anyway and help us diversify our candidate pool and workforce. We value experience, whether gained formally or informally on the job or through other experiences. Job duties, activities and responsibilities are subject to change by our company. OUR COMPANY IS AN EQUAL OPPORTUNITY EMPLOYER. We do not discriminate on the basis of race, color, national origin, ancestry, citizenship status, protected veteran status, religion, physical or mental disability, marital status, sex, sexual orientation, gender identity or expression, age, or any other basis protected by law, ordinance, or regulation. For more information see our Privacy Policy ( cleerlyhealth.com) . All official emails will come from @cleerlyhealth.com email accounts. We may share your personal information with third parties for fraud and compliance purposes, including Tofu. #Cleerly

Requirements

Must-haves

What would I be doing?
Monitor and analyze cloud-specific threat landscapes; proactively identify and mitigate risks related to public cloud service misconfigurations.
Maintain cloud security posture by monitoring and triaging alerts from CSPM (Cloud Security Posture Management) and cloud-native security tools; conduct forensic investigations.
Work in a cross function capacity with our DevOps team to automate security monitoring and alerting solutions directly into the CI/CD pipeline using Infrastructure-as-Code.
Integrate automated vulnerability scanning and security testing directly into the development lifecycle to ensure continuous security feedback for engineering teams.
Coordinate cross-functional teams for vulnerability remediation efforts.
Design and audit cloud-native security controls to ensure continuous compliance and adherence to regulatory frameworks (HIPAA, HITRUST, SOC).
Proactively monitor and evaluate security configurations of systems and applications for continuous improvement and compliance.
Participate in the full security incident response lifecycle, including containment, eradication, and recovery.
Partner with software engineering teams to provide security design consultation, embedding secure-by-design principles into cloud architecture and application features.
5 to 8+ years of dedicated Security Engineering experience with a strong focus on AWS security, cloud-native architecture, and DevSecOps
Demonstrated experience building and architecting security infrastructure from the ground up, serving as the primary architect and functional owner of the security domain
Proven track record implementing cloud-native security tooling (e.g., CSPM, CWPP) and embedding automated security controls into CI/CD deployment pipelines
Proficiency in Python, Terraform, and Containerization strategies such as Kubernetes and Docker
Strong understanding of SaaS risk management and hardening processes as well as experience in DLP implementations and management
Previous experience working within a startup environment, with excellent verbal and written communication skills to address security concerns across internal stakeholders
Impress us more
CISSP, CNAPP, or related certifications
Experience in development or implementation of new tooling using the latest available resources or technologies
Experience implementation or use of CSPM tools such as Wiz, Orca, or AWS security tools suite
Experience with implementation and tuning of SIEM and event management tools
Experience in the digital healthcare industry
Final compensation is determined based on location, experience, skills, and internal equity.
Base Salary: $125,000 - $175,000

Nice-to-haves

None flagged.

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

aijiraci/cdawspythonkubernetesdocker

Platform: greenhouse
Effort: quick

Benefits

Benefits detected in the listing.

Pto