Staff Security Engineer

🕒 Setembro 21

🤠 Texas – Remoto

🤠 Texas – Remote

💵 $245.000 / ano

⏰ Tempo Integral

🔴 Especialista

👮‍♂️ Cibersegurança / Engenheiro de Segurança

👻 Score fantasma 7%

O que significa: a chance de ninguém estar realmente contratando para esta vaga.Como ler: 60% ou mais significa que achamos que é uma vaga fantasma. Pontuações mais baixas preocupam menos.Como pontuamos: tempo em aberto, republicações, vagas abertas vs tamanho do time, rapidez para fechar vagas, e se o salário está divulgado.Observação: é uma estimativa de dados públicos, não um julgamento da empresa. Vagas reais podem ter pontuação alta, então use como uma dica, não como um fato.

Candidatar-se

Encontrar Vagas Remotas Similares

Curative

SiteLinkedInTodas as Vagas

501 - 1000 funcionários

Fundada em 2020

🏥 Saúde

🛡️ Seguros

Healthcare • Insurance

A Curative é uma empresa de seguros de saúde focada em empregadores, oferecendo um plano de saúde empresarial de última geração que enfatiza a acessibilidade, engajamento e simplicidade. Seus planos prometem coparticipações de $0 na rede, $0 em franquias, um único prêmio mensal competitivo, juntamente com uma ampla rede de fornecedores, telemedicina, um extenso formulário de prescrição preferencial de $0, navegadores de cuidado e o Cartão Curative Cash para eliminar custos diretos em muitos cenários. A Curative direciona seus serviços para empregadores e corretores, ao mesmo tempo que fornece aos membros recursos como uma Visita Inicial, programas de cuidados, portais online e serviços de farmácia, além de possuir uma classificação A- da AM Best e certificação HITRUST r2.

Descrição

• Own strategy and hands-on engineering for Detection and Response platforms; identify, onboard, and normalize log sources across cloud, containers, endpoints, and SaaS • Build and maintain SOAR tooling, including AI agents for alert triage and investigation enrichment • Lead incident response for complex threats, develop runbooks, drive post-incident improvements, and design/run BCP/DR tabletop exercises • Embed security into the SDLC through threat modeling, secure design reviews, SAST/DAST tooling, AI code review, and automated security gates in CI/CD pipelines and AI processes • Own host- and application-level vulnerability management and drive remediation • Champion security-as-code practices across engineering teams • Build AI-powered security tooling for threat detection, anomaly identification, automated triage/remediation, and post-mortem summarization • Define and implement security models for LLM-based systems and internal AI tooling • Architect harness patterns to constrain LLM behavior and protect against prompt injection, indirect RAG injection, and data exfiltration • Evaluate and govern AI tool adoption from a security and data-risk perspective • Own AWS security posture and enforce baselines across Linux/Windows, network devices, and enterprise SaaS • Partner with IT to protect corporate identity, endpoints, and enterprise SaaS, including automated access reviews, offboarding checks, and vendor onboarding • Engineer, configure, and operate EDR, DLP, and endpoint security programs • Provide IAM architecture expertise across identity and access systems • Mentor junior and mid-level security engineers through design reviews, pairing, and direct feedback • Define and drive security engineering standards across the organization • Collaborate with IT operations, platform, and software teams to translate threat intelligence into detection and hardening priorities • Report directly to the VP of InfoSec and IT and partner with software, platform, infrastructure, data, and compliance teams

🎯 Requisitos

• Software engineering or strong scripting background (Python, Go, Typescript, or shell): you write production-quality code, keep it in version control, and would rather ship a tool than file a ticket • Depth in one or more specializations: AI Security, Product Security, Detection & Response • 8+ years in security engineering with demonstrated growth into technical leadership • Breadth and hands-on SIEM experience (DataDog, ELK, or equivalent) • Breadth and hands-on AWS security and IAM expertise • Breadth and hands-on Product security fundamentals: threat modeling, SAST/DAST, secure SDLC • Experience building with AI/LLM APIs and practical knowledge of LLM security risks • Breadth and hands-on experience with EDR, DLP, and vulnerability management • Breadth and hands-on experience with containerized workloads and Kubernetes security • Proven track record of mentoring engineers and raising team capability • Startup or scale-up experience in regulated SaaS (healthcare, fintech, or similar) (nice to have) • CISSP, GIAC, or OSCP certification (nice to have) • MITRE ATT&CK knowledge applied to detection engineering (nice to have) • "Security as code" experience (OPA, Checkov, tfsec, or similar) (nice to have) • Data science or anomaly detection skills applied to security telemetry (nice to have) • Healthcare industry background (HIPAA, HITRUST) (nice to have) • Experience with Kubernetes/EKS, Terraform/Terragrunt, Atlantis, Cloudflare, Buildkite, Wiz, Semgrep, EscapeTech, GitHub Advanced Security, Datadog, HashiCorp Vault, N8N, Snowflake, and Linear (nice to have)

🏖️ Benefícios

• Curative Health Plan (100% employer-covered medical premiums for you and 50% coverage for dependents on the base plan.) • $0 copays and $0 deductibles (with completion of our Baseline Visit) • Preventive and primary care built in • Mental health support • One-on-one care navigation • Chronic condition programs (diabetes, weight, hypertension) • Maternity and family planning support • 24/7/365 Curative Telehealth • Pharmacy benefits • Comprehensive dental and vision coverage • Employer-provided life and disability coverage with additional supplemental options • Flexible spending accounts • Generous PTO policy plus 11 paid annual company holidays • 401K for full-time employees • Generous Up to 8–12 weeks paid parental leave, based on role eligibility.

📊 Verifique sua pontuação de currículo para esta vaga

Melhore suas chances de conseguir uma entrevista verificando sua pontuação de currículo antes de se candidatar.

Enviar Currículo