Principal Security Engineer

This is a fully remote position, open to applicants in Texas.

📋 Description

• Establish the technical vision for the security framework encompassing endpoint, email, data loss prevention, vulnerability management, penetration testing, network, application, and data security.

• Develop a long-term cloud and identity security strategy across Microsoft Azure/EntraID and AWS.

• Influence the design patterns for secure infrastructure and guide technical decisions company-wide.

• Oversee security architecture reviews and threat modeling for Care Hub, connected services, Medplum, and Snowflake data platforms.

• Formulate the DevSecOps strategy and standardize security checkpoints throughout the SDLC and CI/CD pipeline.

• Act as the senior technical escalation point, including participation in the on-call rotation, for intricate security incidents.

• Enhance incident playbooks, ransomware and critical-SaaS exercises, along with restoration testing.

• Monitor and provide guidance on the evolving threat landscape in healthcare, including AI-driven and agentic attacks.

• Create documentation and evidence pipelines to support HITRUST, HIPAA, and NIST compliance requirements.

• Present decision-ready recommendations, risk assessments, and documented resolution pathways for high-stakes security issues.

• Promote automated configuration checks and drift detection to avert systemic misconfigurations.

• Shape the multi-year security roadmap and contribute to quarterly engineering planning sessions.

• Investigate proofs of concept to mitigate risks associated with future security initiatives.

• Advocate for thoughtful AI integration within security and guide the secure adoption of AI tools and products.

• Collaborate with engineering, product, IT, and clinical stakeholders to embed security within digital products.

• Mentor the security engineering team and coach engineers on security best practices.

• Advise leadership and align security decisions with business objectives.

• Exercise professional discretion when handling sensitive and personal data.

• Carry out other assigned responsibilities.

⛳️ Requirements

• A Bachelor of Science degree in Computer Science, Information Security, Business, Management, or a related domain is preferred; an advanced degree is a plus.

• Relevant licenses or certifications such as CISSP, CCSP, CISM, GIAC, AWS Certified Security – Specialty, or Microsoft Certified: Cybersecurity Architect Expert are desirable.

• Over 10 years of experience as a Security Engineer, Principal Security Engineer, Security Architect, or in similar roles.

• At least 5 years of experience within the healthcare sector.

• Proven track record of establishing security technical strategy and fostering alignment across security, IT, and engineering teams.

• In-depth expertise in cloud and identity security architecture across AWS and Microsoft Azure/EntraID.

• Practical experience in application and product security, including threat modeling, secure SDLC and CI/CD design, and securing healthcare APIs (FHIR, SMART on FHIR).

• Experience in leading detection and response programs, collaborating with MDR providers, and managing serious security incidents and data breaches.

• Extensive experience in translating HITRUST and HIPAA Security Rule requirements into technical controls and assisting auditors, payors, and regulators.

• Familiarity with utilizing Artificial Intelligence to improve and automate security processes, along with an understanding of AI security risks.

• Knowledge of AWS, Microsoft Intune, EntraID, CrowdStrike Falcon (EDR/SIEM), GitHub Advanced Security, Snowflake, JAMF, Meraki, and JIRA Service Management.

• Strong collaboration and coaching abilities, with a demonstrated history of developing senior engineers.

• Ability to operate independently in ambiguous situations and explore early-stage concepts.

• Experience in a fast-paced, hypergrowth, collaborative environment.

• Willingness to participate in an on-call rotation.

• Contributions to the broader security community are considered an asset.

🏝️ Benefits

• Annual bonus incentive.

• Competitive company benefits package.

• Eligibility for employee equity purchase program.

• Comprehensive medical, dental, and vision insurance.

• Healthcare and Dependent Care FSA.

• Company-funded HSA.

• 401(k) with a 4% match, fully vested from day one.

• Employer-paid short and long-term disability.

• Life insurance equal to 1x annual salary.

• 20 days of PTO.

• 10 Company Holidays.

• 2 Floating Holidays.

• Paid leave for new parents.

• Additional benefits to be specified in the offer.