
11 - 50 employees
đĽ Healthcare
đł Fintech
Healthcare ⢠Fintech
Zest Health is a consumer-focused mobile health solution and concierge empowering members to get the most out of their healthcare benefits. Their mobile app and concierge service utilize personalization to reimagine how members access and navigate their healthcare choices, tailoring the experience to each memberâs benefits, cost profile, and preferences.
đĽ 21 hours ago
đşđ¸ United States â Remote
â° Full Time
đ˘ Junior
đĄ Mid-level
đŽââď¸ Cybersecurity / Security Engineer
đŤđ¨âđ No degree required
đť Ghost score 12%
Where this job comes from
Posted on Zest Health's careers page, not through a job board
First seen by Remote Rocketship 21 hours ago
Still open on Zest Health's site. Checked 1 hour ago.

11 - 50 employees
đĽ Healthcare
đł Fintech
Healthcare ⢠Fintech
Zest Health is a consumer-focused mobile health solution and concierge empowering members to get the most out of their healthcare benefits. Their mobile app and concierge service utilize personalization to reimagine how members access and navigate their healthcare choices, tailoring the experience to each memberâs benefits, cost profile, and preferences.
⢠Administer Okta applications, SSO, MFA, groups, and access policies ⢠Own access provisioning and deprovisioning across organizational systems ⢠Manage employee onboarding and offboarding from laptop issuance through access removal ⢠Run regular access reviews and maintain least privilege ⢠Automate identity workflows using Okta Workflows, scripting, and AI-assisted tooling ⢠Manage MDM enrollment, device policies, encryption, patching, and endpoint compliance ⢠Maintain inventories of devices, applications, accounts, and licenses ⢠Serve as the first point of contact for employee IT and security questions ⢠Operate the compliance program, including control monitoring, evidence collection, audit preparation, and auditor coordination ⢠Own policy approvals and annual policy reviews ⢠Administer HIPAA and security awareness training and track completion ⢠Create and maintain compliance processes, policies, and incident notification procedures ⢠Track relevant vulnerabilities and vendor advisories and drive remediation ⢠Respond to client security assessments and questionnaires and maintain reusable answers ⢠Support client audits and security reviews ⢠Partner with Engineering on application security standards, dependency and vulnerability scanning, and penetration test coordination ⢠Track application security findings through remediation and verify critical issues are resolved ⢠Help engineers adopt tools with appropriate access, privacy, and data controls ⢠Help establish safe company-wide AI usage practices ⢠Serve as the corporate IT and security subject-matter expert as the company scales
⢠2+ years of experience in corporate IT, systems administration, IT security, security operations, or a related role ⢠Hands-on experience with an identity provider (Okta or similar), including SSO, MFA, and user lifecycle management ⢠Experience with an MDM platform (Kandji, Jamf, Intune, Mosyle, or similar), ideally in a primarily macOS environment ⢠Experience with employee onboarding and offboarding, access provisioning, and access reviews ⢠Familiarity with SOC 2 or a similar compliance framework, including controls, policies, and evidence ⢠Working knowledge of least privilege, endpoint security, vulnerability management, and incident response basics ⢠Clear written communication ⢠Fluency with LLM tools, specifically Claude and Gemini, and judgment to verify their output ⢠Good judgment balancing security, usability, and speed ⢠Comfort operating within a broad function, learning quickly, and solving problems directly ⢠Commitment to work Eastern Timezone hours ⢠Must be authorized to work in the U.S. without sponsorship; role is not eligible for visa sponsorship ⢠Preferred: experience supporting a SOC 2 audit from readiness through report ⢠Preferred: experience with HIPAA or another healthcare compliance requirement ⢠Preferred: experience with Vanta, Drata, Secureframe, or similar ⢠Preferred: experience responding to client security questionnaires or enterprise diligence requests ⢠Preferred: ability to automate workflows with scripting, APIs, or modern automation tools ⢠Preferred: comfort opening pull requests for security patches and dependency updates ⢠Preferred: familiarity with AWS, GCP, or Azure cloud identity and security ⢠Preferred: experience as an early IT or security hire at a growing startup
⢠Equity grants ⢠Retirement plan matching ⢠Employer-sponsored medical, dental, and vision plans ⢠Opportunity to grow into senior security, GRC, or IT leadership roles ⢠Meaningful work alongside dynamic, mission-driven teammates ⢠High-growth startup environment ⢠LLM tooling and MCP connections to Vanta and other systems ⢠Remote work arrangement
Apply NowImprove your chances of getting an interview by checking your resume score before you apply.
đĽ 21 hours ago
Mid-Level Cybersecurity Engineer supporting federal clientsâ A&A, RMF, and FISMA compliance. Maintaining authorization packages, SSPs, POA&Ms, SARs, and continuous monitoring documentation.
đşđ¸ United States â Remote
đľ $110k - $120k / year
â° Full Time
đĄ Mid-level
đ Senior
đŽââď¸ Cybersecurity / Security Engineer
đĽ 21 hours ago
Security Engineer securing TPâs U.S. Government operations through threat assessment, incident response, and compliance. Implementing NIST, FISMA, RMF, and Defense Industrial Base security controls remotely.
đşđ¸ United States â Remote
đľ $95k - $100k / year
â° Full Time
đ˘ Junior
đĄ Mid-level
đŽââď¸ Cybersecurity / Security Engineer
đĽ 22 hours ago
Cybersecurity Engineer building automated AWS and Kubernetes security for Lumin Digitalâs cloud-native digital banking platform. Developing AI-assisted workflows, cryptographic lifecycles, telemetry, and compliance automation.
đşđ¸ United States â Remote
đľ $135k - $155k / year
â° Full Time
đĄ Mid-level
đ Senior
đŽââď¸ Cybersecurity / Security Engineer
đĽ 22 hours ago
Security & Trust Engineer protecting AssetWatchâs industrial condition-monitoring platform. Owning customer security reviews, SOC 2 compliance, and security operations across a remote team.
đşđ¸ United States â Remote
đľ $126k - $140k / year
â° Full Time
đĄ Mid-level
đ Senior
đŽââď¸ Cybersecurity / Security Engineer
đĽ 22 hours ago
IT Security Engineer supporting USDA cybersecurity operations through vulnerability scanning, Tenable administration, and security control assessments. Maintaining secure enterprise systems for a digital transformation and mission support company.
đşđ¸ United States â Remote
đľ $75k - $100k / year
â° Full Time
đĄ Mid-level
đ Senior
đŽââď¸ Cybersecurity / Security Engineer