[Hiring] Senior Security Engineer @Opala

Role Description

We're hiring a Senior Security Engineer to own the day-to-day operation of Opala's security controls across Azure and AWS. You will report to the Director of Security & Compliance and work side by side with our Platform and Data teams. You'll both lead by doing, designing and implementing guardrails, pipeline security checks, and supply chain protections, and lead by influence, building paved roads that make it easy to ship securely in a healthcare data environment. This is a hands-on role for someone who takes ownership, drives work to completion, and doesn't wait to be told what's next. In your first 90 days you'll take ownership of cloud posture findings and the security testing that gates changes to production.

Responsibilities

• Own the operation of Opala's cloud security controls in Azure and AWS, including cloud security posture and vulnerability remediation.
• Drive findings to closure by triaging, assigning owners, following up with engineering teams, and reporting status to leadership.
• Confirm that appropriate security testing has been completed for each change (e.g., SAST, DAST, dependency and vulnerability scanning).
• Where testing is missing, recommend solutions and implement the tooling hands-on, including in CI/CD pipelines (GitHub Actions) and software supply chain protections.
• Design and implement Infrastructure as Code guardrails, partnering with the Platform and Data teams so features and data platform changes (e.g., Databricks) are secure and compliant by design.
• Integrate logging and monitoring with our MDR/SOC vendor (Arctic Wolf), tune alerting, and investigate security incidents, documenting root cause and remediation.
• Automate evidence collection for compliance controls (e.g., in Drata), support the annual audit cycle, and coordinate third-party penetration testing and remediation.
• Research security enhancements and advise leadership on emerging risks.

Qualifications

• 5+ years in cloud security, DevSecOps, or platform engineering roles.
• Experience securing both AWS and Azure, with working knowledge of Microsoft Entra ID, AWS IAM, Microsoft Defender for Cloud, and AWS Security Hub.
• Solid experience with Infrastructure as Code (e.g., Terraform) and scripting for automation.
• Experience with SAST/DAST, software supply chain security, and API security.
• Ability to collaborate closely with developers and product squads while setting security best practices.

Preferred Qualifications

• Security and cloud certifications such as AWS Certified Security - Specialty, AWS Certified Solutions Architect - Professional, Azure AZ-500 (Security Engineer), and Azure AZ-305 (Solutions Architect Expert).
• Experience using or administering compliance automation tools (Drata or similar GRC platforms). Prior experience is not required; we expect you to automate evidence collection.
• Experience working with managed security (MDR/SOC) providers.
• Experience with immutable infrastructure practices.
• Experience in regulated industries (healthcare, fintech, etc.).
• Additional scripting languages such as PowerShell or Python.
• Exposure to enterprise architecture frameworks such as TOGAF.

Benefits

• The Seattle base salary range for this full-time position is $163k-$192k. Within the range, individual pay is determined by work location and additional factors, including job-related skills, experience, and relevant education or training.
• Benefits include medical, dental, vision, life and AD&D insurance, EAP, short-term and long-term disability, 16 days PTO, 8 paid holidays, fully paid holiday closure, parental and family medical leave, 401k, stock options and annual bonuses and salary increases based on merit.