Staff Product Security Engineer

🔥 1 hour ago

🇵🇱 Poland – Remote

💵 zł350k - zł400k / year

⏰ Full Time

🔴 Lead

👮‍♂️ Cybersecurity / Security Engineer

🗣️🇺🇦 Ukrainian Required

Where this job comes from

Posted on doxy.me - telemedicine for all's careers page, not through a job board

First seen by Remote Rocketship 1 hour ago

Logo of doxy.me - telemedicine for all

doxy.me - telemedicine for all

51 - 200 employees

Founded 2014

🏥 Healthcare

⚕️ Healthcare Insurance

🤖 Artificial Intelligence

Healthcare • Healthcare Insurance • Artificial Intelligence

Doxy. me is the world's most loved telemedicine solution, providing an easy-to-use platform for clinicians and patients without the need for downloads or installs. With a strong focus on accessibility, Doxy. me offers clinic-optimized workflows that empower healthcare providers to deliver better care. The platform is fully HIPAA and GDPR compliant, ensuring privacy and security for all telemedicine interactions. Trusted by over 1 million providers, Doxy. me has delivered billions of minutes of telemedicine, transforming how care is delivered across various practices.

📋 Description

• Provide security leadership and guidance within product engineering teams through developer-led threat modeling and education on security and privacy best practices • Coordinate security requirements and standards throughout the product life cycle • Manage vulnerabilities, cryptography, security monitoring, and risk management controls within application-based products • Participate in developing Doxy.me’s DevSecOps security strategy and posture • Design, advocate for, and help build secure-by-default CI/CD pipelines and processes • Develop engineering reference implementations for security patterns and guardrails within software frameworks and the technology stack • Support and implement security technology and security control design proofs of concept and implementations • Liaise with Product and Engineering teams to ensure product business cases include functional security specifications • Ensure compliance with information security standards • Track risk, threat, and vulnerability metrics within the product environment • Prioritize and implement remediation activities for application flaws

🎯 Requirements

• A Bachelor's degree in computer science, programming, or related field and/or equivalent job experience in lieu of a degree • Experience working with remote, globally distributed teams • Experience working in organisations that develop software and/or operate managed infrastructure and technology services for their own customers • Experience with AWS platforms or services, or equivalent experience in Azure or GCP • Experience with Kubernetes and container infrastructure • Secure development and application of IaC solutions, including Terraform and Helm • Experience with DevOps tools and processes, such as CI/CD • Experience with security testing tools, such as static code analysis and DAST • Strong understanding of OWASP Top 10, application security vulnerabilities, and web security testing methodologies • Understanding of secure coding practices for compliance requirements within SOC2, ISO, HIPAA, HITRUST, etc. • Ability to effectively give, receive, and respond to feedback • Ability to educate company employees about security measures • Strong communication skills in English and Ukrainian are highly desirable • Willingness to undergo a background check after receiving a job offer

🏖️ Benefits

• Remote-first company with regional hubs for in-person collaboration • Background checks performed after extending a job offer • Opportunity to work with a global team of technologists, academics, researchers, and innovators

Apply Now

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Similar Jobs

🕒 October 21

ETAP - Operation Technology, Inc.

201 - 500

⚡ Energy

🔧 Hardware

Software Pentester securing ETAP’s electrical engineering software and cloud infrastructure. Driving penetration testing, DevSecOps, and product cybersecurity for energy-transition technology.

🕒 October 13

SOFTSWISS

1001 - 5000

💼 Consulting

📣 Marketing

🎮 Gaming

Head of Infrastructure Security leading SOFTSWISS’s Infrastructure Security team. Driving cloud, Kubernetes, access, and vulnerability security across its international iGaming business.

🗣️🇷🇺 Russian Required

🕒 October 2

Invicti

201 - 500

🔒 Cybersecurity

☁️ SaaS

🏢 Enterprise

Staff Security Researcher developing malware and vulnerability detections for Invicti’s application-security platform. Researching web, cloud-native, and AI attack techniques for production capabilities.

🕒 September 4

RTB House

1001 - 5000

🤖 Artificial Intelligence

📣 Marketing

Staff Security Engineer securing RTB House’s Deep Learning-powered DSP, infrastructure, and software development practices. Designing organization-wide controls and standards across engineering and security operations.

🗣️🇵🇱 Polish Required

🕒 September 4

Alex Staff Agency

11 - 50

🎯 Recruiter

🤝 B2B

Security engineer building Imunify360’s Node.js runtime protection product from scratch. Designing attack detection and launching transparent, real-time defenses for hosting environments.

Built by Lior Neu-ner. I'd love to hear your feedback — Get in touch via DM or support@remoterocketship.com
Follow Remote Rocketship on LinkedInFollow Remote Rocketship on InstagramFollow Remote Rocketship on FacebookFollow Remote Rocketship on TikTok