Abrar Admin

Ironsail

Lead Security EngineerLocation: RemoteCompensation$20.00&ndash;$30.00 USD per hourThis position is compensated in U.S. Dollars (USD) regardless of the candidate's country of residence.For candidates outside the United States, compensation will still be paid in USD and converted by your payment provider or financial institution based on applicable exchange rates.Employment Type: Full-Time Independent ContractorAbout IronsailIronsail is an AI-driven healthcare technology company seeking a Lead Security Engineer to become our first dedicated security hire and build our security program from the ground up.This is not a compliance role.This is not a governance role.This is not a policy-writing position.This is not a traditional CISO role.This is a highly technical engineering position for someone who enjoys solving difficult infrastructure and security problems.We are looking for an engineer who evolved into security.The strongest candidates typically started their careers as:<ul><li>DevOps Engineer</li><li>DevSecOps Engineer</li><li>Infrastructure Engineer</li><li>Systems Engineer</li><li>Cloud Engineer</li><li>Site Reliability Engineer (SRE)</li><li>Security Engineer</li><li>Senior Software Engineer with infrastructure ownership</li></ul>If your experience is primarily governance, compliance, auditing, consulting, or risk management, this role is unlikely to be the right fit.If you've personally built infrastructure, secured cloud environments, automated deployments, implemented production security controls, and enjoy owning technical outcomes, we'd love to speak with you.Why This Role Is DifferentThis isn't joining an existing security department.You'll build it.You'll become the technical owner responsible for designing, implementing, and continuously improving security across our cloud infrastructure, applications, engineering processes, and internal systems.You'll work directly with Engineering, DevOps, Product, and Leadership to establish security as a core engineering function&mdash;not a compliance checkbox.You'll have significant autonomy to shape how security is implemented across the company.Why We're HiringFollowing a recent internal security review, we've identified several areas requiring dedicated ownership, including:<ul><li>Privileged Access Management (PAM)</li><li>Endpoint security</li><li>Identity &amp; Access Management (IAM)</li><li>Vulnerability Management</li><li>Backup &amp; Disaster Recovery</li><li>Security monitoring and alerting</li><li>Security automation</li><li>Formal onboarding and offboarding processes</li><li>Access governance</li><li>Security architecture ownership</li></ul>Today these responsibilities are distributed across Engineering and DevOps.We want one experienced engineer to own them.What You'll DoSecurity Engineering<ul><li>Assess existing cloud infrastructure and security posture</li><li>Design and implement security architecture improvements</li><li>Harden Linux systems and cloud environments</li><li>Secure applications, endpoints, and production infrastructure</li><li>Design practical remediation strategies</li><li>Build scalable security standards</li></ul>Implement and manage<ul><li>Privileged Access Management (PAM)</li><li>Identity &amp; Access Management (IAM)</li><li>Multi-Factor Authentication (MFA)</li><li>Endpoint Detection &amp; Response (EDR)</li><li>Backup &amp; Disaster Recovery</li><li>Network Security</li><li>Secrets Management</li></ul>Vulnerability ManagementBuild and own our vulnerability management program.Responsibilities include:<ul><li>Nessus</li><li>Qualys</li><li>Security monitoring platforms</li><li>Alerting</li><li>Security metrics</li><li>Configuration reviews</li><li>Security code reviews</li><li>Internal security assessments</li><li>Access reviews</li><li>Phishing simulations</li></ul>Own remediation through completion.Security Operations<ul><li>Respond to incidents</li><li>Perform root cause analysis</li><li>Improve monitoring</li><li>Automate repetitive security tasks</li><li>Improve operational resilience</li><li>Design secure engineering workflows</li></ul>Identity &amp; Access ManagementOwn:<ul><li>Employee onboarding</li><li>Employee offboarding</li><li>Role-based access control</li><li>Privileged account governance</li><li>Least-privilege access</li><li>Periodic access reviews</li></ul>ComplianceSecurity comes first.Compliance follows.You'll support initiatives including:<ul><li>HIPAA</li><li>SOC 2</li><li>ISO 27001</li></ul>You'll also:<ul><li>Support vendor security reviews</li><li>Coordinate penetration tests</li><li>Assist cyber insurance requirements</li><li>Drive remediation of audit findings</li></ul>AI-First EngineeringIronsail is an AI-first engineering company.We expect our Lead Security Engineer to use AI every day.Examples include:<ul><li>Threat investigations</li><li>Security research</li><li>Log analysis</li><li>Incident response</li><li>Security automation</li><li>Python scripting</li><li>Report generation</li><li>Vulnerability remediation</li><li>Infrastructure analysis</li></ul>We expect candidates to already be comfortable using tools such as:<ul><li>Claude</li><li>ChatGPT</li><li>Gemini</li><li>Cursor</li><li>GitHub Copilot</li><li>Similar AI engineering tools</li></ul>Candidates should be able to explain how AI improves their daily engineering workflow.Required QualificationsWe are specifically looking for engineers.Candidates should have 7+ years of hands-on experience in one or more of the following:<ul><li>DevOps Engineering</li><li>DevSecOps</li><li>Infrastructure Engineering</li><li>Systems Engineering</li><li>Cloud Engineering</li><li>Site Reliability Engineering (SRE)</li><li>Security Engineering</li><li>Senior Software Engineering with infrastructure ownership</li></ul>Required Technical ExperienceYou have personally implemented production security controls including:<ul><li>Linux administration</li><li>AWS, Azure and/or GCP</li><li>Identity &amp; Access Management</li><li>Privileged Access Management</li><li>MFA</li><li>Endpoint Detection &amp; Response</li><li>Vulnerability Management</li><li>Network Security</li><li>Backup &amp; Disaster Recovery</li></ul>You also have experience with:<ul><li>Python</li><li>Bash</li><li>PowerShell</li><li>CI/CD security</li><li>Infrastructure as Code</li><li>Kubernetes</li><li>Docker</li><li>Cloud-native infrastructure</li></ul>What We're Looking ForYou are a builder.You can walk into an unfamiliar environment, quickly understand how systems work, identify the highest-risk security issues, prioritize what matters, and begin implementing improvements.You've built security programs&mdash;not simply audited them.You don't hand engineering teams a list of recommendations.You implement the solutions yourself.You enjoy startups, ambiguity, ownership, and solving difficult engineering problems.Nice to Have<ul><li>Healthcare or pharmaceutical experience</li><li>HIPAA</li><li>CyberArk</li><li>Delinea</li><li>HashiCorp Vault</li><li>Kubernetes Security</li><li>Terraform</li><li>Incident Response</li><li>Digital Forensics</li></ul>Certifications are appreciated but not required, including:<ul><li>CISSP</li><li>CISM</li><li>CISA</li><li>Security+</li><li>AWS Security Specialty</li></ul>This Role Is Not a Fit If<ul><li>Your experience is primarily governance, compliance, or auditing.</li><li>You have never personally implemented production security controls.</li><li>You rely on engineering teams to deploy your recommendations.</li><li>You prefer strategy and policy over hands-on engineering.</li><li>You are uncomfortable being the first dedicated security owner.</li></ul>Why Join IronsailThis is a rare opportunity to build an engineering-driven security program inside a fast-growing AI healthcare technology company.You'll work directly with leadership, engineering, and DevOps to shape how security is designed, implemented, and scaled across the organization.If you're excited by ownership, autonomy, technical challenges, and the opportunity to build something from the ground up, we'd love to hear from you.Job Type: ContractPay: &pound;15.11-&pound;22.66 per hourApplication question(s):<ul><li>Have you personally been responsible for building or significantly improving a security program in an organization where no dedicated security function previously existed?</li><li>Do you actively use AI tools (ChatGPT, Claude, Gemini, Copilot, Cursor, etc.) as part of your daily cybersecurity workflow?</li><li>Have you personally implemented and managed security controls such as PAM, MFA, endpoint protection, vulnerability management, or access control systems in a production environment?</li><li>Are you comfortable serving as the first dedicated security hire and independently identifying, prioritizing, and remediating security risks with minimal oversight?</li></ul>Work Location: Remote

Lead Security Engineer - Independent Contractor

Join Ironsail and explore 1   exciting career opportunities. They're hiring for various roles with options for remote or on-site work. Apply today and become part of their innovative team.

Ironsail

About Company

Lead Security Engineer - Independent Contractor