Senior Security Engineer

Opala develops healthcare products that tackle the most complex data challenges faced by payers and providers. As a startup originating from a major healthcare plan in the Northwest, we combine deep health-tech expertise with top-tier data and software engineering talent to create products our customers find meaningful and valuable. Our data products empower payers and their partners to find timely insights and take action in areas like value-based care analytics, interoperability compliance, and real-time streaming of clinical data.

We're hiring a Senior Security Engineer to own the day-to-day operation of Opala's security controls across Azure and AWS. You will report to the Director of Security & Compliance and work side by side with our Platform and Data teams. You'll both lead by doing, designing and implementing guardrails, pipeline security checks, and supply chain protections, and lead by influence, building paved roads that make it easy to ship securely in a healthcare data environment. This is a hands-on role for someone who takes ownership, drives work to completion, and doesn't wait to be told what's next. In your first 90 days you'll take ownership of cloud posture findings and the security testing that gates changes to production.

Responsibilities

• Own the operation of Opala's cloud security controls in Azure and AWS, including cloud security posture and vulnerability remediation. Drive findings to closure by triaging, assigning owners, following up with engineering teams, and reporting status to leadership. • Confirm that appropriate security testing has been completed for each change (e.g., SAST, DAST, dependency and vulnerability scanning). Where testing is missing, recommend solutions and implement the tooling hands-on, including in CI/CD pipelines (GitHub Actions) and software supply chain protections. • Design and implement Infrastructure as Code guardrails, partnering with the Platform and Data teams so features and data platform changes (e.g., Databricks) are secure and compliant by design. • Integrate logging and monitoring with our MDR/SOC vendor (Arctic Wolf), tune alerting, and investigate security incidents, documenting root cause and remediation. • Automate evidence collection for compliance controls (e.g., in Drata), support the annual audit cycle, and coordinate third-party penetration testing and remediation. • Research security enhancements and advise leadership on emerging risks. Minimum Qualifications • 5+ years in cloud security, DevSecOps, or platform engineering roles. • Experience securing both AWS and Azure, with working knowledge of Microsoft Entra ID, AWS IAM, Microsoft Defender for Cloud, and AWS Security Hub. • Solid experience with Infrastructure as Code (e.g., Terraform) and scripting for automation. • Experience with SAST/DAST, software supply chain security, and API security. • Ability to collaborate closely with developers and product squads while setting security best practices. Preferred Qualifications • Security and cloud certifications such as AWS Certified Security - Specialty, AWS Certified Solutions Architect - Professional, Azure AZ-500 (Security Engineer), and Azure AZ-305 (Solutions Architect Expert). • Experience using or administering compliance automation tools (Drata or similar GRC platforms). Prior experience is not required; we expect you to automate evidence collection. • Experience working with managed security (MDR/SOC) providers. • Experience with immutable infrastructure practices. • Experience in regulated industries (healthcare, fintech, etc.). • Additional scripting languages such as PowerShell or Python. • Exposure to enterprise architecture frameworks such as TOGAF.