Staff Security Engineer (Data Security)

Join our team as a Staff Security Engineer, where you will design, implement, and maintain security services that support our business. You will work cross-functionally to shape our security services strategy and execution, set and uphold security processes, and mentor new engineers. Enjoy a remote-first working environment, flexible work schedules, and generous benefits including 168 PTO hours, 12 weeks paid parental leave, and a 401(k) with up to 4% match.

• Lead the development, implementation, and ongoing maintenance of comprehensive security strategies and solutions, ensuring alignment with business objectives.
• Design and deploy advanced security controls to protect the business, working across disciplines to shape the security services strategy and execution.
• Mentor and galvanize new engineers to do their best work, setting and upholding the standard for security processes to support high-quality engineering.
• BS/BTech (or higher) in Computer Science, Information Technology, Cybersecurity or a related field
• 8+ years of experience in software or security engineering within Cloud Native environments
• Cloud & Data Platforms: Experience with modern cloud data platforms (e.g., Postgres, Snowflake, Databricks, AWS S3) and data architectures (data warehouses, data lakes, lakehouses)
• Compliance & Privacy: Foundational understanding of protecting PII/PHI and healthcare regulatory requirements (e.g., HIPAA)
• Data Security Posture Management (DSPM): Deep experience with data discovery, classification, and other DSPM focused areas to help protect sensitive data across the organization
• Technical & Scripting: Proficiency in Python (or a similar language) and regex patterns for automation and tooling integration
• DSPM Tools: Hands-on experience with Data Security Posture Management platforms (e.g., Wiz DSPM, BigID, Cyera, Bedrock Data)
• Industry Context: Prior experience working in healthcare, health tech, or another highly regulated, compliance-heavy environment
• Data Lifecycle: Familiarity with data retention, lifecycle management, and legal hold processes
• Pipeline Integration: Experience embedding security controls directly into data pipelines and ETL/ELT workflows
• Data Protection: Familiarity and experience with Tokenization, Encryption, or cryptography tools or processes that help protect sensitive data at rest
• Physical Requirements
• Sitting for prolonged periods of time. Extensive use of computers and keyboard. Occasional walking and lifting may be required
• Experience architecting, developing, and deploying large-scale distributed systems at scale
• Experience with cloud technologies, e.g., AWS, Azure, GCP
• Experience building continuous integration and continuous development (CI/CD) pipelines
• Familiarity with server-side web technologies (eg: Java, Python, Scala, C#, C++, Go)
• 4+ years of experience acting as a trusted technical decision-maker in a team setting, solving for short-term and long-term business value
• Experience with health-tech systems, like Electronic Health Records, Clinical data, etc