Cyber Threat Analyst

Arcadia is dedicated to happier, healthier days for all. We believe that there is a better healthcare world – one powered by data. Our platform transforms complex, diverse data into a unified foundation for health, helping organizations deliver better care, boost revenue, and lower costs. We’re a team of fiercely driven individuals committed to making healthcare more sustainable—and we’re looking for passionate people to help us get there.For more information, visit arcadia.io.Why This Role Is Important to Arcadia Arcadia is seeking a Senior Engineer – Security (Application Security) to play a key hands-on role in protecting our cloud-native healthcare platform and the sensitive data entrusted to us. This role focuses on building, operating, and continuously improving application and cloud security controls while actively contributing to detection, incident response, and threat mitigation efforts. This is a senior individual contributor role for a highly technical security engineer who thrives in execution-heavy environments. You will collaborate closely with peers across the organization to embed security into the development lifecycle, strengthen detection and response capabilities, and reduce risk across Arcadia’s SaaS platform in a highly regulated healthcare environment.What Success Looks LikeIn 3 months- Gain a deep understanding of Arcadia’s application architecture, cloud environment, and security tooling - Begin contributing to application security reviews, threat modeling, and vulnerability remediation - Participate in active incident response and detection activities - Build strong working relationships with Engineering, Infrastructure, and Security Assurance teams In 6 months- Independently own key application security controls and tooling - Improve vulnerability detection, remediation workflows, and secure-by-default engineering patterns - Contribute meaningfully to incident investigations, root cause analysis, and post-incident improvements - Help mature security automation and security-as-code practices In 12 months- Be a trusted senior technical voice for application and cloud security - Demonstrate measurable improvements in application security posture, detection coverage, and response effectiveness - Help reduce security risk through improved design, automation, and operational discipline What You'll Be DoingApplication & Cloud Security EngineeringDesign, implement, and maintain application security controls across Arcadia’s cloud-native SaaS platformPartner with Product and Engineering teams to embed security into system design, development workflows, and CI/CD pipelinesConduct threat modeling, architecture reviews, and secure design assessments for new and existing servicesOwn and improve vulnerability management processes, including identification, prioritization, and remediation trackingImplement and maintain security tooling such as SAST, DAST, dependency scanning, container scanning, and secrets detectionDetection, Response & Threat AnalysisParticipate in security incident response activities including detection, investigation, containment, and remediationMonitor and analyze logs, alerts, and security events to identify suspicious activity and emerging threatsContribute to detection engineering by tuning alerts, improving signal quality, and reducing noiseSupport threat intelligence analysis and apply insights to improve preventive and detective controlsPerform post-incident analysis and recommend technical and process improvementsSecurity Automation & Engineering ExcellenceBuild security-as-code solutions to automate control enforcement, validation, and remediationUse scripting and automation to reduce manual effort and improve consistencySupport secure AWS architecture using services such as EKS, ECS, Lambda, IAM, and VPCContribute to identity and access management best practices across AWS, Okta/Auth0, and SaaS platformsCompliance & Risk EnablementTranslate compliance requirements (e.g., SOC 2, ISO 27001, HITRUST, HIPAA) into practical technical controlsPartner with Security Assurance to support audits, evidence collection, and continuous control monitoringHelp identify and remediate security risks discovered through assessments, audits, or incidentsWhat You'll Bring6+ years of experience in application security, cloud security, or security engineering roles Strong hands-on experience securing cloud-native, SaaS-based environments (AWS required) Solid understanding of: Application security principles and common vulnerabilities (OWASP Top 10) Secure software development practices and CI/CD integration Cloud security architecture and IAM Incident detection and response fundamentals Experience with security tools such as SIEM, SAST/DAST, EDR, vulnerability scanners, and cloud security platforms Ability to script and automate security workflows using Python, Bash, or similar languages Strong analytical skills and the ability to clearly communicate security risks and recommendations W