Senior Security Engineer

About Everon

Everon builds an integrated benefits technology platform that connects agents, employers, and employees from referral through enrollment to ongoing care in one cohesive platform. As we grow, we're building out the security function to match, and we're looking for a Senior Security Engineer to help lead that effort.

About the Role

You'll be responsible for bolstering our security infrastructure end to end. That means owning identity and access management, shaping our organizational security posture, hardening our web applications, and running blue-team defense across our AWS and GCP environments. You'll work closely with engineering to bake security into the development lifecycle rather than bolt it on afterward.

What You'll Do

• Design, implement, and maintain IAM policies and access controls across cloud and internal systems
• Establish and continuously improve our organizational security posture, including policies, controls, and risk assessments
• Assess and harden the security of our web applications
• Monitor, detect, and respond to security incidents (blue team)
• Own security architecture and configuration across our AWS and GCP environments
• Support compliance efforts against frameworks such as HIPAA and SOC 2
• Write scripts (Bash) to automate security tooling and remediation
• Review and secure infrastructure-as-code, primarily Terraform

Required Qualifications

• 3+ years of experience in a security engineering or related role
• Experience with IAM, organizational security posture, and web application security
• Blue team (defensive security) experience
• Cloud experience with GCP and/or AWS
• Experience with compliance frameworks such as HIPAA and/or SOC 2
• Basic scripting ability (Bash)
• Experience with infrastructure-as-code, Terraform preferred

Nice to Have

Certifications

• Security certifications (Security+, AWS/GCP security certs, CISSP, OSCP)

Security Operations

• Red team (offensive security) experience
• Incident response experience
• SIEM and security logging/monitoring tools
• Vulnerability management (scanning, triage, remediation)
• Experience with MDM, EDR, or RMM tooling

Engineering & Architecture

• DevOps experience, including QA engineering and CI/CD
• Containerization experience (Docker, Kubernetes)
• Familiarity with secure SDLC practices
• Threat modeling experience
• Familiarity with zero-trust security architecture

Emerging Tech

• AI-relevant work, particularly building with a Claude stack

Pay: $120,000.00 - $155,000.00 per year

Benefits:

• Dental insurance
• Health insurance
• Paid time off
• Parental leave
• Professional development assistance
• Relocation assistance

Work Location: In person