Lead Cybersecurity Engineer

Cerbo
· Opti Mantra is a healthcare technology company built for the practices actively changing how medicine is delivered. Our platforms serve functional, integrative, direct primary care, concierge, med spa and behavioral health practitioners who need software that keeps pace with how they work, not the other way around.

Each platform is a purpose-built EHR and practice management solution. Cerbo is architected for clinical depth: deep configuration, protocol-specific workflows and the kind of flexibility that holistic and functional medicine practices require. Opti Mantra is structured for scale: multi-modality breadth, out-of-the-box readiness and the operational infrastructure that growing practices rely on.

Together, our two platforms form a leading presence in this rapidly expanding market. Our practitioners are redefining what a patient experience can look like. We exist to give them the technology foundation to do exactly that, at whatever size and pace they choose to grow.

As Lead Cybersecurity Engineer, you will lead the company’s cybersecurity program across Cerbo and Opti Mantra, supporting the protection of protected health information (PHI) and the security of production platforms serving thousands of clinicians and millions of patients. This role will oversee the development, implementation, and ongoing improvement of a unified security program across both products, including security controls, policies, risk management, compliance, and security operations.

The Lead Cybersecurity Engineer will serve as the technical owner of the company’s security program, establishing and advancing the security practices, standards, and processes that support both platforms.

This position requires an individual with hands-on experience securing cloud environments, implementing security controls, and deploying and operating security tooling in production. The Lead Cybersecurity Engineer will lead the technical execution of initiatives supporting HIPAA compliance and the company’s SOC 2 Type II program, including control implementation, evidence collection, security assessments, and continuous improvement of the organization’s security posture.

Working cross-functionally with Dev Ops, Engineering, IT, and other stakeholders, this role will evaluate and implement security solutions, harden cloud infrastructure, establish security standards and processes, and identify opportunities to strengthen security across both products while balancing common organizational controls with product-specific requirements.

Reporting to the Chief Technology Officer, this is a hands-on technical leadership role for an individual who can operate effectively across security engineering, cloud security, and compliance while building and advancing the company’s cybersecurity program.

• Own the technical implementation and ongoing management of the company’s SOC 2 Trust Services Criteria and HIPAA Security Rule requirements across AWS environments supporting Cerbo and Opti Mantra, including control mapping, evidence collection, policy management, and continuous monitoring.
• Lead compliance documentation and remediation efforts, including control narratives, system and data-flow documentation, scope determinations, and prioritization and closure of security and compliance gaps with supporting evidence.
• Serve as the technical point of contact for auditors and assessors and drive the compliance workstream to completion, coordinating interviews, artifact requests, demonstrations, remediation activities, dependencies, and key audit milestones across teams.

• Secure and harden production AWS environments across Cerbo and Opti Mantra,…