Staff Software Engineer - Product Security
Core
Design and deploy scalable security infrastructure, identity systems, and compliance automation for a large-scale cloud-native healthcare platform.
Role type
Staff Software Engineer (Product Security)
Builds
Scalable security infrastructure, identity and access management systems, compliance dashboards, and self-service security tooling.
Domain
Healthcare technology, Cloud Security, Infrastructure Security
Required skills
Python, TypeScript, Go, Rust, Kubernetes, Terraform, Cloud Security (GCP/AWS/Azure), Security Testing Tools, Secure SDLC, Zero Trust Design, Identity & Access Management, Observability, Anomaly Detection, Compliance Automation, Software Supply Chain Security, Threat Modeling, Incident Response, Technical Leadership.
Preferred skills
Zero Trust design, Authentication and authorization frameworks, Data loss prevention, Security compliance automation (SOC 2, ISO 27001, PCI-DSS, NIST), Security telemetry and threat detection, AI/ML security, CI/CD pipeline hardening, Security certifications (CISSP, GCP Professional Cloud Security Engineer, OSCP).
Technologies
AWS, Azure, GCP, Kubernetes, Terraform, GitLab, Okta, Auth0, OPA, Python, TypeScript, Go, Rust, Maven, CI/CD, Microservices, SAST/DAST, SBOM.
Responsibilities
Design and deploy scalable infrastructure supporting HIPAA, SOC 2, and ISO 27001 compliance; Build and support identity, authentication, and access management systems; Implement observability and anomaly detection across microservices; Apply Zero Trust principles and enforce least-privilege access; Create compliance dashboards and automate evidence gathering; Develop self-service security tooling for developer workflows; Automate onboarding, offboarding, and access reviews; Integrate software supply chain protections; Explore and adopt AI-assisted security tools; Automate policy enforcement and compliance checks; Lead threat modeling and security architecture reviews; Work with product teams to build secure-by-default patterns; Ensure encryption and safe data handling; Contribute to incident response; Mentor teammates and promote secure coding practices; Collaborate with Engineering, Compliance, Clinical, and Legal teams.
Seniority
Staff, hands-on IC with mentorship responsibilities.
