Senior Security Engineer

• Champion security day to day across all teams, partnering with the Security Engineer
• Understand products and analyze risks as early as possible
• Negotiate security trade-offs within feature scope and delivery timelines
• Drive the remediation of vulnerabilities and penetration testing findings through to resolution
• Provide teams with security-by-design techniques, solutions, and processes
• Detect, assess, and handle security incidents, and capture lessons learned
• Execute the security and compliance programs in a highly regulated environment
• Collaborate with Product and Engineering teams
• Participate in team rituals and contribute to a writing-first culture

• Engineering degree or equivalent
• At least 5 years of experience in a technical environment, including significant experience in security
• Strong experience in a SaaS company
• Proven track record of leading a cross-functional project from end to end with multiple teams
• Professional proficiency in written and spoken English
• Experience in a highly regulated environment, particularly healthcare, with ISO 27001 or NIS2 experience—a plus
• Experience facilitating security awareness or enablement initiatives—a plus
• Experience with orchestrator- or harness-driven development tools, and with creating reusable skills or agents—a plus
• Ability to assess the security of a product, project, or feature as early as possible
• Ability to prioritize vulnerabilities and penetration testing findings based on actual risk and drive their remediation
• Ability to negotiate security trade-offs without blocking deliveries
• Ability to design adoptable security-by-design rules, techniques, and processes
• Ability to detect, assess, and handle a security incident
• Credible understanding of application and cloud security fundamentals
• Partnership-oriented mindset, clear communication, initiative, versatility, rigor, and the ability to document or escalate

• Remote-first organization
• Team rituals
• Writing-first culture
• Individual contributor role with no people management responsibilities
• Decision-making autonomy within the security domain
• Direct, measurable impact on the care of tens of thousands of patients
• Broad scope and foundational initiatives to build