Senior Security Engineer

The Senior Security Engineer will lead initiatives that address the company’s—and some of our industry’s—most sophisticated and meaningful security and architectural challenges. You will build relationships across all parts of the business and drive multi-functional initiatives to continuously improve our security and privacy posture and also responsible for building and implementing controls that can scale and optimize as we move into a context-aware security environment.

If you are passionate about our mission and you are an experienced hands-on application and cloud security professional who is excited about developing and leading a broad range of functions at a mission-driven, highly-regulated technology company, this role is for you.

What you'll do:

• Implement security best practices and influence the overall security strategy
• Architect, implement, support and evaluate security-focused tools
• Conduct threat modeling exercises and comprehensive risk assessments
• Design and operate scalable processes to provision cloud access and maintain least-privilege
• Guide engineering teams to build robust solutions that consider security and privacy
• Build security automations in the CI/CD pipeline
• Perform code reviews to identify and remediate security vulnerabilities
• Maintain a reliable infrastructure using technologies such as Terraform and Kubernetes
• Mentor and provide guidance to junior security team members

To be successful in this role, you'll need:

• 4+ years work experience in a Security Engineer role
• Demonstrated leadership in conducting risk assessments and threat modeling
• Excellent communication skills, with the ability to clearly present technical concepts and their implications to both technical and non-technical stakeholders
• Experience with securing cloud (e.g. AWS, GCP) and Kubernetes environments
• Familiarity with common security tools (e.g. static analysis, penetration testing)
• Understanding of common security flaws (e.g. OWASP Top 10)

Pay Transparency Statement 

This is a hybrid position based out of one of our offices: San Francisco, CA, Plano, TX, or Lehi, UT. Hybrid employees are expected to be in the office three days per week (Plano, TX) or two days per week (all other locations). #LI-hybrid

The actual pay rate offered within the range will depend on factors including geographic location, qualifications, experience, and internal equity. In addition to the salary, you will be eligible for stock options and benefits like health insurance, 401k, and paid time off. Learn more about our benefits at https://jobs.collectivehealth.com/#benefits