Security Engineer

Description

The company builds health technology and reaches more than 40 million people every month. It is a joint venture of Red Ventures and UnitedHealth Group's Optum.

The security team works in an Agile setup alongside business, IT and engineering staff. The platform is cloud-native, and the culture puts security first.

You will take part in strategic work that strengthens the company's security posture and protects sensitive data.

Responsibilities

• Build and run security controls and architecture that protect the company's cloud infrastructure, applications and data from cyber attacks.
• Lead improvements to cloud security posture and vulnerability management, including pull-request scanning, tracking findings to closure with engineers, and tuning coverage and license use.
• Create and enforce software supply chain controls for packages, dependencies and extensions across the developer toolchain, with thresholds set to cut noise.
• Bring security into CI/CD pipelines, including governing AI-written code at the pipeline checkpoint.
• Build automation, internal tools and integrations with the developer platform and security stack so controls are self-service instead of ticket-driven.
• Work with Platform and Software Engineering teams to raise awareness of security issues and prioritise fixes together.
• Run security assessments, including code reviews and application security testing, to find and reduce risk in new and changing systems.
• Join a weekly on-call rotation for managed detection and response escalations. Investigate threats, respond to incidents and carry out root cause analysis.
• Write and maintain security SOPs and policies that follow industry best practice and rules such as HIPAA and NIST CSF.
• Track new attack techniques affecting applications and infrastructure, especially in healthcare, and adjust strategy or tooling to match.

Requirements

• Required: a bachelor's degree in Computer Science or a related field, or equivalent experience.
• Required: a minimum of 4+ years in application security, cloud security or a related cybersecurity role.
• Required: a solid grasp of cloud security principles, architectures and services. AWS or Azure is preferred.
• Required: hands-on work with cloud security posture management or CNAPP tools such as Wiz, Orca or Prisma Cloud, and a record of getting findings fixed with engineering teams.
• Required: experience building security automation, tools and integrations, plus working skill in at least one scripting or programming language.
• Required: working knowledge of secure coding.
• Required: knowledge of frameworks, standards and regulations such as NIST CSF, HIPAA and MITRE ATT&CK.
• Required: strong problem-solving and analytical skills, with critical thinking and sound decision-making.
• Required: experience in incident response and recovery.
• Preferred: professional certifications such as CISSP, CCSP, OSCP or GIAC.
• Preferred: expertise in AWS security controls, monitoring and orchestration, such as SCPs, GuardDuty, Config and Macie.
• Preferred: working familiarity with Terraform, GitHub and DevSecOps workflows, especially securing GitHub Actions and other CI/CD pipelines.
• Preferred: experience securing AI or LLM-assisted development workflows, or reviewing AI-generated code at scale.
• Preferred: experience with internal developer platforms or portals, such as Backstage.
• Preferred: experience working alongside an MDR or managed SOC provider.

Conditions

Hybrid role. Staff are in the office Tuesday through Thursday each week, and remote work on Mondays and Fridays is optional.

The office is at 1801 California St., Denver, CO 80202.

The company does not offer visa sponsorship for this role at this time.

The company is an equal opportunity employer and makes employment decisions based solely on merit and qualifications.

Benefits

• Starting salary of $100,000 to $130,000, depending on location, qualifications and experience.
• Medical, dental and vision coverage, subject to eligibility.
• Life insurance, plus short- and long-term disability insurance.
• Flexible spending accounts and a health savings account (HSA).
• Paid time off and holiday pay.
• 401(k) with company match.
• Employee assistance program, mental health support and wellness coaching.
• Paid parental bonding benefit program.
• Pharmacy benefits and income protection plans.
• Pet services plans.
• Commuter benefits.
• Discounted gym and fitness center access.