> Markdown version of [/jobs/ext/1021499-security-engineer-soc-2-hitrust-hipaa](https://www.wearedevelopers.com/jobs/ext/1021499-security-engineer-soc-2-hitrust-hipaa). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Security Engineer - SOC 2, HITRUST & HIPAA

- **Company:** eSolutionsFirst LLC
- **Location:** McLean, VA, United States
- **Experience:** Expert
- **Contract:** Temporary contract
- **Skills:** Artificial Intelligence, Amazon Web Services, Microsoft Azure, Bash Shell, Software as a Service, Cloud Computing Security, Cyber Security, EHealth, Intrusion Detection and Prevention, Python (Programming Language), Key Management, Security Information and Event Management, Software Vulnerability Management, Scripting, Google Cloud, Kubernetes, Terraform, Devsecops, Docker, Security Orchestration, Automation & Response
- **Published:** June 23, 2026
- **Apply:** https://www.dice.com/job-detail/67140c9d-03f8-430f-a61f-70e1cc64aa3e

## About the Role

* 5+ years of experience in Security Engineering, Cloud Security, DevSecops, or Security Architecture.
 * Hands-on experience with SOC 2, HITRUST, and HIPAA compliance programs.
 * Strong knowledge of AWS, Azure, or Google Cloud Platform security.
 * Experience with SIEM, vulnerability management, CSPM, and security automation tools.
 * Proficiency in Python, Bash, or similar scripting languages.
 * Experience with Docker, Kubernetes, Terraform, encryption, and secrets management.

Preferred Qualifications

 * CISSP, CCSP, HITRUST CCSFP, AWS Security Specialty, or similar certifications.
 * Experience in healthcare SaaS, digital health, or health IT environments.
 * Knowledge of FedRAMP, StateRAMP, and AI/ML security.

Core Skills :

 * SOC 2 * HITRUST * HIPAA * Cloud Security * DevSecops * Security Automation * Risk Management * Incident Response * Vulnerability Management * Audit Leadership.

## Description

* Seeking a hands-on Senior Security Engineer to lead security controls, cloud security, compliance initiatives, and audit readiness for SOC 2 Type II, HITRUST, and HIPAA.
 * This role partners with Engineering, Product, and Compliance teams to implement, automate, and maintain security programs across the organization., * Lead implementation and maintenance of SOC 2, HITRUST, and HIPAA security controls.
 * Manage audit readiness, evidence collection, remediation, and assessor coordination.
 * Conduct security risk assessments and ensure protection of sensitive healthcare data.
 * Design and secure AWS, Azure, and/or Google Cloud Platform environments.
 * Integrate security into CI/CD pipelines and automate compliance monitoring.
 * Manage vulnerability management, SIEM monitoring, threat detection, and incident response.
 * Support customer security reviews and technical security assessments.


## Related Videos

- [You can’t hack what you can’t see](https://www.wearedevelopers.com/videos/41-you-can-t-hack-what-you-can-t-see)
- [DevSecOps: Injecting Security into Mobile CI/CD Pipelines](https://www.wearedevelopers.com/videos/273-devsecops-injecting-security-into-mobile-ci-cd-pipelines)
- [Docker Compose: Rediscovered](https://www.wearedevelopers.com/videos/1978-docker-compose-rediscovered)
- [DevSecOps culture](https://www.wearedevelopers.com/videos/783-devsecops-culture)
- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [DevSecOps: Security in DevOps](https://www.wearedevelopers.com/videos/36-devsecops-security-in-devops)

## Related Articles

- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated)
- [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology)
- [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities)
- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [Why Upskilling And Reskilling is Important For Developers](https://www.wearedevelopers.com/magazine/428-why-upskilling-and-reskilling-is-important-for-developers)