Product Security Engineer

🏢 ОфисMiddleПолная занятость

Зарплата не указана

Вилки нет, про деньги придётся договариваться с нуля.

Нажмите на сигнал, чтобы увидеть, на чём он основан

Наша компания

ABOUT CANDID HEALTH In simple terms, healthcare in the U.S. has a massive, invisible problem behind the scenes: getting doctors paid by insurance companies is notoriously complicated. Insurance rules are constantly changing, and every bill (or "claim") requires mountains of paperwork. When mistakes happen, bills get rejected, patients end up with unexpected charges, and healthcare providers waste billions of dollars and countless hours on administrative bureaucracy instead of focusing on patient care.

О роли

That is where Candid Health steps in. Founded by former Palantir leaders who experienced these pain points firsthand, we are building the modern financial backbone for American healthcare. Instead of relying on decades-old legacy software or attempting to patch broken systems with superficial tools, we've rebuilt the underlying infrastructure from the ground up. Our core product is an autonomous R

Чем предстоит заниматься

Security by Design: Lead threat modeling sessions during the architectural design phase of new features to identify potential risk vectors early

Secure Development Lifecycle (SDLC): Drive the adoption of "Shift Left" security practices, integrating security tooling (SAST, DAST, SCA) directly into developer workflows

Vulnerability Management: Triage, prioritize, and partner with engineering teams to remediate vulnerabilities found in code, third-party libraries, and cloud infrastructure

Security Tooling & Automation: Build, maintain, and tune security automation tools to reduce friction for developers while maintaining high-security standards

Secure Coding Standards: Develop and deliver training, coding patterns, and security guardrails to help engineering teams build resilient, secure-by-default products

Incident Response Support: Assist in identifying the root cause of security incidents related to product features and contribute to post-incident remediation and architectural improvements

Supply Chain Security: Build out processes and automation to ensure the security of open-source dependencies

Наши требования

Experience: 5+ years of experience in software engineering or security engineering, specifically focusing on product security or application security

Technical Skills

Proficiency in one or more programming languages (e.g., Python, Go, Java, or JavaScript)

Deep understanding of modern web/cloud architecture (e.g., APIs, Microservices, Kubernetes, AWS/GCP/Azure)

Familiarity with the OWASP Top 10 and common exploitation techniques

Collaboration: Proven ability to influence and collaborate with engineering teams without hindering development velocity

Problem Solving: Strong analytical skills to evaluate complex systems and design innovative, practical security solutions

Experience with Infrastructure as Code (IaC) security (e.g., Terraform, CloudFormation)

Experience in designing cryptographic implementations or secure authentication/authorization flows (e.g., OAuth, OIDC, JWT)

Knowledge of compliance frameworks relevant to our industry (e.g., SOC2, ISO27001, HIPAA)

Дополнительно

PAY TRANSPARENCY

The estimated starting annual salary range for this position is $180,000 - 258,000 USD. The listed range is a guideline from Pave data, and the actual base salary may be modified based on factors including job-related skills, experience/qualifications, interview performance, market data, etc. Total compensation for this position may also include equity, sales incentives (for sales roles), and employee benefits. Given Candid Health’s funding and size, we heavily value the potential upside from equity in our compensation package. Further note that Candid Health has minimal hierarchy and titles, but has broad ranges of experience represented within roles

Candid Health

San Francisco (CA), Denver (CO), New York (NY)

ГрейдMiddle

ЗанятостьПолная занятость

РегионНе Россия

ФорматОфис

ИсточникСкрыто

Опубликовано18 мая

Все вакансии компании

AI-помощник

под эту вакансию

Войди, чтобы AI оценил твоё соответствие вакансии и написал сопроводительное письмо

Мы против мошенников на площадке: если тебя просят заплатить, продиктовать код или установить непонятное приложение, прекращай общение и сразу пиши нам (чат с основателем или форма обратной связи).