Security Engineer

Description

Healthcare is complicated, and the team here works to make it simpler.

The company is a health technology business that aims to make health easier to navigate, more accessible, and more affordable. Its products reach over 40 million people every month.

You will sit on the security team and help shape strategic work that strengthens the company's security posture and protects sensitive data. The work is Agile and cross-functional, done alongside business, IT, and engineering staff. The environment is cloud-native, moves quickly, and treats security as a shared concern.

Responsibilities

• Design, build, and run security controls and architectures that guard the cloud infrastructure, applications, and data against cyber threats.
• Raise the security level of the cloud estate and the vulnerability management program. This covers scanning pull requests, triaging findings, tracking each one to closure with engineering teams, and tuning scan coverage and licensing.
• Create and enforce software supply chain controls across the developer toolchain, covering packages, dependencies, and extensions. Set enforcement thresholds that cut false alarms instead of adding to them.
• Bring security into CI/CD pipelines, including governance of AI-generated code at the pipeline stage.
• Develop automation, internal tools, and integrations with the developer platform and security stack, so teams can apply controls on their own instead of filing tickets.
• Work with Platform and Software Engineering teams to make security issues visible, and help them set priorities for fixing those issues together.
• Run security assessments, such as code reviews and application security testing, to find and reduce risk in new and changing systems.
• Take part in a weekly on-call rotation for escalations from managed detection and response. Investigate possible threats, respond to incidents, and carry out root cause analysis.
• Write and maintain security standard operating procedures and policies that follow industry best practice and regulations such as HIPAA and NIST CSF.
• Track new tactics, techniques, and procedures against application and infrastructure vulnerabilities, particularly in healthcare, and update strategy or tooling in response.

Requirements

• Bachelor's degree in Computer Science or a related field, or equivalent experience.
• At least 4 years of experience in application security, cloud security, or a similar cybersecurity role.
• Sound understanding of cloud security principles, architectures, and services. AWS or Azure experience is preferred.
• Hands-on work with cloud security posture management or CNAPP tools such as Wiz, Orca, or Prisma Cloud, and a record of getting vulnerability findings fixed with engineering teams.
• Experience building security automation, tooling, and integrations, and working proficiency in at least one scripting or programming language.
• Working knowledge of secure coding.
• Knowledge of security frameworks, standards, and regulations such as NIST CSF, HIPAA, and MITRE ATT&CK.
• Strong problem-solving and analysis skills, with the judgment to think critically and decide well.
• Experience with incident response and recovery.

Conditions

Preferred: Professional certifications such as CISSP, CCSP, OSCP, or GIAC.

Preferred: Deep knowledge of AWS security controls, monitoring, and orchestration, such as SCPs, GuardDuty, Config, and Macie.

Preferred: Working familiarity with Terraform, GitHub, and DevSecOps workflows, especially securing GitHub Actions and other CI/CD pipelines.

Preferred: Experience securing AI or LLM-assisted development workflows, or reviewing AI-generated code at scale.

Preferred: Experience with internal developer platforms or portals such as Backstage.

Preferred: Experience working alongside an MDR or managed SOC provider.

Starting salary is $100,000 to $130,000. Actual pay depends on location, qualifications, and experience.

The role is hybrid. Staff are in the office Tuesday through Thursday, and Mondays and Fridays are optional remote days.

The office is at 11000 Optum Cir, Eden Prairie, MN 55344.

No visa sponsorship is offered for this role at this time.

The company is an equal opportunity employer and decides hiring on merit and qualifications.

Benefits

• Health insurance covering medical, dental, and vision.
• Life insurance, short and long-term disability insurance, and income protection plans.
• Flexible spending accounts and an HSA.
• Paid time off, holiday pay, and paid parental bonding.
• 401(k) with match.
• Employee assistance program, mental health support, and wellness coaching.
• Pharmacy benefits and pet services plans.
• Commuter benefits and a gym and fitness center discount program.