Staff Engineer, Security

This is a fully remote position, open to applicants in United States.

📋 Description

• Establish and guide the Security Engineering North Star. Spearhead the creation of a unified, multi-year vision for Security Engineering — performing gap analyses, collaborating with key stakeholders, and converting strategy into a practical roadmap that resonates with teams across the organization.

• Take the lead on AI-native Security initiatives: Security is a core component of Grow’s Internal Foundations pillar, which is developing company-wide infrastructure to facilitate AI adoption. We create AI tools for Security, Engineering, and the broader company. You’ll have a unique opportunity to shape the safe and thoughtful integration of AI tools at the enterprise level.

• Develop secure-by-default infrastructure. Design, implement, and deploy essential security services — such as unified authentication, authorization, audit logging, and egress control — enabling engineering teams to innovate rapidly without compromising security.

• Manage data security at scale. Propel systematic data tagging throughout Grow's production data models, ensuring alignment with our Data Classification Policy to guarantee that every datastore adheres to security controls and is observable by the responsible teams.

• Promote security visibility and accountability. Create company-wide security scorecards, providing every team with a clear, real-time overview of their security posture — transforming security from a periodic audit into an ongoing, integrated practice.

• Empower the engineering organization. Collaborate extensively with engineering, platform, and product teams to deliver high-leverage, secure-by-default services — alleviating the burden on individual teams while enhancing the overall security standards across Grow. Propel automated Least Privilege and systematic Vulnerability Management as organization-wide capabilities.

⛳️ Requirements

• You possess extensive, multi-domain security expertise — you've made significant contributions across Product Security, Cloud Security, Data Security, Access Governance, and/or Detection & Response, and you understand how to interconnect these areas.

• You have recent, hands-on engineering experience — you're adept at writing code, contributing to security infrastructure, and conducting system design reviews, rather than merely advising from the sidelines.

• You've successfully built security programs at scale — you've designed and implemented organization-wide processes such as Security Review, Secure Design, Security Champions, and Security Metrics Reporting in a previous role.

• You're an articulate and persuasive communicator — you can convey security strategies and risks to non-technical audiences (including executives and clinical stakeholders) with clarity, empathy, and confidence.

• You thrive in environments of ownership and ambiguity — you excel when presented with a blank slate, know how to prioritize effectively, and can navigate seamlessly between long-term vision and immediate execution.

🏝️ Benefits

• Comprehensive Health Coverage: Medical, dental, and vision insurance, along with life and disability coverage.

• Parental Leave & Family Support: Up to 18 weeks of paid leave and a stipend for new child expenses.

• Financial Wellness: 401(k) program and equity opportunities.

• Meals & Home Office Support: Stipends for home office setup and ongoing meal expenses, with tailored benefits for both remote and in-office employees.

• Time Off to Recharge: Flexible PTO, 12 paid holidays, and a full week off during winter break.

• Wellness & Development: Annual stipends dedicated to personal and professional growth.

• Mental & Physical Health Support: Free access to therapy through the Grow platform, weekly flexible hours for self-care (“Mental Health Mornings/Afternoons”), and memberships to leading wellness apps (such as One Medical, Headspace, and Talkspace).

• Extra Perks: Discounts on pet insurance, commuter benefits, and global travel assistance.