Security Engineer

Description

Healthcare is complicated, and the company is working to simplify it.

The company is a health technology business that helps more than 40 million people each month.

The team is made up of people who care about the work and about each other.

You will join the security team and help shape strategic work that strengthens our security posture and guards sensitive data.

You will collaborate in Agile teams with the business, IT and engineering groups.

You will work in a fast-moving, cloud-native environment where security is part of the culture.

The company is a joint venture of Red Ventures and Optum, part of UnitedHealth Group.

Responsibilities

• Design, build and run security controls and architectures that protect cloud infrastructure, applications and data from cyber threats.
• Strengthen cloud security and the vulnerability management program by scanning pull requests, triaging findings, tracking them to closure with engineering teams, and tuning coverage and licenses.
• Create and enforce software supply chain controls for the developer toolchain, covering packages, dependencies and extensions, with thresholds set to cut noise instead of adding to it.
• Bring security into CI/CD pipelines, including governing AI-written code at the pipeline gate.
• Build automation, internal tools and integrations for the developer platform and security stack so controls are self-service rather than ticket-driven.
• Work with Platform and Software Engineering teams to make security issues visible and agree on priorities for fixing them.
• Run security assessments, including code reviews and application security testing, to find and reduce risk in new and changing systems.
• Join a weekly on-call rotation for managed detection and response escalations. Investigate suspected threats, respond to incidents and carry out root cause analysis.
• Write and maintain security standard operating procedures and policies that follow industry best practice and regulations such as HIPAA and NIST CSF.
• Keep up with attacker tactics, techniques and procedures against applications and infrastructure, especially in healthcare, and update strategy or tooling to match.

Requirements

• A bachelor's degree in computer science or a related field, or equivalent experience.
• 4+ years of experience in application security, cloud security or a similar cybersecurity role.
• A solid understanding of cloud security principles, architectures and services.
• Hands-on work with cloud security posture management or CNAPP tools such as Wiz, Orca or Prisma Cloud, and a record of driving vulnerability findings to closure with engineering teams.
• Experience building security automation, tooling and integrations, plus working proficiency in at least one scripting or programming language.
• Working knowledge of secure coding practices.
• Knowledge of security frameworks, standards and regulations such as NIST CSF, HIPAA and MITRE ATT&CK.
• Strong problem-solving and analytical skills, with the ability to think critically and make sound decisions.
• Experience in incident response and recovery.
• Preferred: professional certifications such as CISSP, CCSP, OSCP or GIAC.
• Preferred: expertise in AWS security controls, monitoring and orchestration, such as SCPs, GuardDuty, Config, Macie and similar tools.
• Preferred: experience with AWS or Azure.
• Preferred: working familiarity with Terraform, GitHub and DevSecOps workflows, especially securing GitHub Actions and other CI/CD pipelines.
• Preferred: experience securing AI- or LLM-assisted development workflows, or reviewing AI-generated code at scale.
• Preferred: experience with internal developer platforms or portals, such as Backstage.
• Preferred: experience working alongside an MDR or managed SOC provider.

Conditions

Starting salary is $100,000 to $130,000. Actual pay depends on geographic location, qualifications and experience.

This pay summary is shared to meet the requirements of various state Fair Pay Acts.

This is a hybrid role. The team works in the office Tuesday through Thursday each week, and you are welcome to work remotely on Mondays and Fridays if you prefer.

Office address: 1101 Red Ventures Dr, Fort Mill, SC 29707.

No visa sponsorship is available for this role at this time.

The company is an equal opportunity employer and bases employment decisions on merit and qualifications, without discrimination on any protected basis.

Benefits

• Medical, dental and vision coverage, subject to eligibility.
• Life insurance and short- and long-term disability insurance.
• Flexible spending accounts and a health savings account.
• Paid time off and holiday pay.
• 401(k) with company match.
• Paid parental bonding benefit program.
• Employee assistance program and mental health support.
• Pharmacy benefits and income protection plans.
• Wellness coaching.
• Pet services plans.
• Commuter benefits.
• Gym and fitness center discount program.