Senior Cyber Security Engineer

About the role

PsychPlus is looking for a Senior Cyber Security Engineer to strengthen its cloud security, application security and compliance initiatives. The role works closely with Security Leadership, Product and Engineering teams to secure cloud infrastructure, protect sensitive patient information and build automated security controls. It suits a hands-on security engineer with strong expertise in Microsoft Azure, DevSecOps, vulnerability management and security automation.

Key responsibilities

• Lead vulnerability identification, assessment, prioritization and remediation across applications and cloud infrastructure.
• Partner with Product and Engineering teams on secure coding practices, threat modeling and application security requirements.
• Integrate and manage SAST, DAST and SCA tools within CI/CD pipelines.
• Secure the internal Electronic Health Record (EHR) platform and protect patient data.
• Configure, manage and optimize Microsoft Entra ID (Azure AD), including Conditional Access policies.
• Deploy, configure and monitor Microsoft Defender across endpoints, cloud workloads and infrastructure.
• Support SOC 2 certification and HIPAA compliance by implementing and validating technical controls, coordinating audit remediation and verifying corrective actions.
• Assist with security incident investigations, alert triage, threat response and incident response improvements.
• Develop security automation with PowerShell, Python or similar scripting tools.
• Advise Security Leadership on technical risks, security improvements and cloud governance.

Required profile

• 5+ years of cyber security engineering experience, especially in DevSecOps, application security or product security.
• Proven experience managing vulnerability scanners, interpreting findings, prioritizing risks and driving remediation with Engineering teams.
• Strong understanding of CI/CD pipelines, containerization, DevSecOps and the secure SDLC.
• Experience integrating SAST, DAST and SCA tools into development pipelines.
• Strong understanding of HIPAA requirements and SOC 2 Trust Services Criteria, with experience implementing technical controls.
• Ability to configure cloud security settings, troubleshoot technical issues and implement security policies directly.
• Excellent spoken English and strong communication skills; able to balance security requirements with development velocity.
• Nice to have: EHR or regulated healthcare experience, Microsoft AZ-500, CISSP or CSSLP certifications, and security scripting experience.

Required skills

• Microsoft Azure, Microsoft Entra ID (Azure AD), Conditional Access, Microsoft Defender
• SAST, DAST, SCA integration in CI/CD pipelines
• Vulnerability management and remediation
• PowerShell and Python scripting for security automation