Staff Software Engineer – Product Security

About This Opportunity

We are representing a confidential digital health organization in their search for a Staff Software Engineer - Product Security. Our client is a fast-growing platform serving women's and family healthcare needs at scale, partnering with major employers and health plans across the United States. This is an opportunity to build security infrastructure that protects sensitive health information while enabling rapid innovation in a mission-driven environment.

This role is based in the USA with a hybrid work model. Team members in the New York Metropolitan area work onsite three days per week. Those in Boston, DC, Chicago, Seattle, and San Francisco participate in monthly in-person collaboration days.

Responsibilities

Security Platform Engineering

• Design and implement scalable infrastructure supporting HIPAA, SOC 2, and ISO 27001 compliance
• Build and maintain systems for identity, authentication, and access management across cloud platforms
• Implement observability and anomaly detection across microservices, data stores, and SaaS platforms
• Establish Zero Trust principles and enforce least-privilege access company-wide
• Develop compliance observability dashboards and automated evidence collection

Security Automation & Tooling

• Create self-service security tools that integrate with developer workflows including CI/CD pipelines and infrastructure-as-code
• Automate onboarding/offboarding, access reviews, and approvals
• Integrate software-supply-chain security including dependency scanning
• Develop or adopt AI-assisted security tooling to proactively identify risks
• Automate policy enforcement, static and dynamic security scans, and compliance verification

Application & Data Security

• Lead threat modeling and security architecture reviews for new products and services
• Partner with product and data teams to embed secure-by-default design patterns
• Ensure encryption, access tracking, and secure data handling across protected health information workflows
• Contribute to incident response, post-mortems, and continual improvement of security posture

Leadership & Collaboration

• Act as technical authority for security engineering
• Mentor peers and promote secure coding and architecture practices
• Partner cross-functionally with Engineering, Compliance, Clinical, and Legal teams to align on security strategy
• Champion an engineering culture of transparency, accountability, and continuous improvement

What We're Looking For

Required Qualifications

• 8+ years of software engineering experience, including 3+ years in security infrastructure or application security
• Proven ability to design and implement large-scale, distributed, cloud-native systems
• Strong coding proficiency in Python, TypeScript, Go, and/or Rust
• Deep understanding of cloud security (GCP preferred; AWS/Azure experience welcome)
• Experience with Kubernetes, containers, and infrastructure-as-code such as Terraform
• Familiarity with security testing frameworks and secure SDLC principles
• Excellent communication and documentation skills

Preferred Qualifications

• Expertise in Zero Trust architectures, authentication/authorization frameworks, and data-loss prevention
• Experience with security compliance automation (SOC 2, ISO 27001, PCI-DSS, NIST)
• Background in data security telemetry and threat detection
• Familiarity with AI/ML security and AI-assisted analysis tools
• Exposure to supply-chain security and CI/CD pipeline hardening
• Relevant certifications such as CISSP, GCP Professional Cloud Security Engineer, or OSCP

What Makes You a Great Fit

• You take a pragmatic, automation-first approach to solving security problems
• You balance rigor with velocity, enabling teams to move quickly without compromising trust
• You communicate clearly with both technical and non-technical stakeholders
• You're curious, adaptable, and eager to lead initiatives from concept to production
• You care deeply about building safer, more secure healthcare technology

How We Work With You

When you apply through Get A Job.ai, our talent team will review your background and schedule an initial screening call to understand your experience and career goals. If there's a strong match, we will submit your profile to our client for consideration. We coordinate all interview stages and provide guidance throughout the process.

Please do not contact the client directly. All communication regarding this opportunity should go through Get A Job.ai to ensure proper representation and the best candidate experience.

Pay

Pay via Get A Job.ai has not been specified for this role. Compensation details will be discussed during the screening process based on your experience and qualifications.

Get A Job.ai is an equal opportunity recruiter. We welcome applications from all qualified candidates regardless of race, color, religion, sex, disability, age, sexual orientation, gender identity, national origin, veteran status, or genetic information.