Staff Cloud Security Engineer

The posting, as AnswersNow Inc wrote it

STAFF CLOUD SECURITY ENGINEER

Remote, Anywhere in the US

About AnswersNow

AnswersNow is a venture-backed digital health company delivering virtual autism care to families. Our mission is to empower and enhance the lives of those affected by autism by making personalized therapy more accessible. We connect families with expert clinicians quickly — often moving from assessment to therapy within weeks, without waitlists or commutes — and deliver outcomes that parents describe as life-changing.

Why this role matters

We’re looking for a Staff Cloud Security Engineer who thrives on designing scalable, secure cloud systems and enabling data-driven decision-making.

This is our first dedicated security hire and the single owner of security across our platform, infrastructure, and corporate environment. You'll set the strategy, build the program, and do the hands-on work. You'll partner directly with the CTO and engineering team, and you'll be the technical authority on security for customers, auditors, and leadership.

This is a Staff-level role. We expect you to operate with significant autonomy, make sound risk-based tradeoffs, and raise the security maturity of the whole organization.

What you’ll do

Cloud & Infrastructure Security

• Architect, secure, and continuously harden our AWS environment (IAM, VPC design, KMS, CloudTrail, GuardDuty, Security Hub, Config, WAF, etc.)
• Secure our serverless and data layers, including Lambda, S3, and PostgreSQL (RDS/Aurora): encryption at rest and in transit, least-privilege access, network isolation, backup integrity, and audit logging
• Implement Infrastructure-as-Code security guardrails and policy-as-code
• Own secrets management, key management, and certificate lifecycle
• Manage and harden Amazon Elastic Kubernetes Service (EKS) infrastructure, including cluster security, network policies, and container runtime security

Application & API Security

• Secure our APIs and application stack: authentication/authorization, session management, rate limiting, input validation, and OWASP Top 10 / API Top 10 risks
• Embed security into the SDLC with threat modeling, secure design reviews, SAST/DAST, dependency and container scanning, and CI/CD pipeline security
• Secure our proprietary real-time video platform (WebRTC/media transport, session access controls, recording storage, and encryption)
• Run our vulnerability management and penetration testing program, including vendor selection, scoping, and remediation tracking

AI Security & Governance

• Establish company-wide AI usage policies and governance frameworks to ensure safe, ethical, and compliant adoption of internal and third-party AI tools
• Architect and secure in-product AI/ML capabilities, protecting against OWASP LLM Top 10 vulnerabilities (e.g., prompt injection, insecure output handling, data poisoning)
• Implement strict data privacy guardrails to prevent unauthorized exposure of PHI/PII in model training,

[…]
i, CloudFormation, or CDK) and CI/CD security

• Experience with AI security, LLM application security, and guarding against OWASP LLM Top 10 vulnerabilities
• Strong incident response experience
• Excellent communication: you can explain risk to engineers, executives, auditors, and customers alike

Nice to have

• Experience with compliance automation platforms such as Vanta, Drata, or Secureframe
• Experience securing real-time communication or video platforms (WebRTC)
• Familiarity with HITRUST, ISO 27001, or NIST frameworks
• Experience at a startup or scale-up where you built a security program from scratch
• Relevant certifications (AWS Security Specialty, CISSP, CCSP, OSCP, or similar)
• Experience with pediatric or behavioral health data and the added privacy considerations that come with minors' information

What we offer

• $171,000- $199,500 annual salary
• Equity options in a high-growth, venture-backed company.
• Comprehensive medical, dental, and vision.
• Generous PTO and remote-first flexibility.

More About AnswersNow

AnswersNow welcomes applicants of all backgrounds, experiences, and abilities. We believe a diverse team is a strong team, and are committed to provide a fair and equitable experience for every candidate. If you require reasonable accommodations at any stage, we encourage you to reach out. We’re here to support!

Learn more about us at getanswersnow.com http://getanswersnow.com.

E-Verify & Right to Work
AnswersNow participates in E-Verify and electronically verifies the work authorization of all new hires upon employment. E-Verify is only used after a job offer has been accepted; it is not used to pre-screen applicants.

For more information, view the E-Verify Participation https://static-assets.ripplingcdn.com/webapp-static/apps/everify/us_poster_participation.pdf and Right to Work https://static-assets.ripplingcdn.com/webapp-static/apps/everify/us_poster_righttowork.pdf posters in English and Spanish.