Staff Security Engineer

🕒 il y a 25 jours

🤠 Texas – Distant

🤠 Texas – Remote

💵 $245 000 / an

⏰ Temps Plein

🔴 Expert

👮‍♂️ Cybersécurité / Ingénieur Sécurité

👻 Score fantôme 1%

Ce que ça veut dire : la probabilité que cette offre reste ouverte sans recrutement actif.Comment le lire : 60 % ou plus, on pense que c'est une offre fantôme. Un score plus bas est moins inquiétant.Comment on la calcule : ancienneté, republications, postes ouverts vs taille de l'équipe, rapidité de clôture, et si le salaire est indiqué.À noter : une estimation à partir de données publiques, pas un jugement sur l'entreprise. De vraies offres peuvent avoir un score élevé, alors prenez-le comme un indice, pas comme un fait.

Postuler Maintenant

Trouver des Emplois à Distance Similaires

Configurer une alerte email pour les nouveaux emplois

📊 Vérifiez votre score de CV pour ce poste

Améliorez vos chances d'obtenir un entretien en vérifiant votre score de CV avant de postuler.

Télécharger le CV

Curative

Site WebLinkedInTous les Emplois

501 - 1000 employés

Fondée en 2020

🏥 Santé

🛡️ Assurance

Healthcare • Insurance

Curative est une entreprise d'assurance santé orientée vers les employeurs, proposant un plan de santé de groupe de nouvelle génération mettant l'accent sur l'accessibilité financière, l'engagement et la simplicité. Leurs plans promettent zéro frais de consultation en réseau, zéro franchise et une prime mensuelle unique et compétitive, accompagnés d'un large réseau de prestataires, de télémédecine, d'une vaste liste de médicaments préférentiels à zéro, de navigateurs de soins et de la Curative Cash Card pour éliminer les coûts à la charge des membres dans de nombreux contextes. Curative s'adresse aux employeurs et courtiers tout en fournissant aux membres des ressources telles qu'une visite de base, des programmes de soins, des portails en ligne et des services de pharmacie. L'entreprise détient une note A- de AM Best et la certification HITRUST r2.

Description

• Own strategy and hands-on engineering for Detection and Response platforms; identify, onboard, and normalize log sources across cloud, containers, endpoints, and SaaS • Build and maintain SOAR tooling, including AI agents for alert triage and investigation enrichment • Lead incident response for complex threats, develop runbooks, drive post-incident improvements, and design/run BCP/DR tabletop exercises • Embed security into the SDLC through threat modeling, secure design reviews, SAST/DAST tooling, AI code review, and automated security gates in CI/CD pipelines and AI processes • Own host- and application-level vulnerability management and drive remediation • Champion security-as-code practices across engineering teams • Build AI-powered security tooling for threat detection, anomaly identification, automated triage/remediation, and post-mortem summarization • Define and implement security models for LLM-based systems and internal AI tooling • Architect harness patterns to constrain LLM behavior and protect against prompt injection, indirect RAG injection, and data exfiltration • Evaluate and govern AI tool adoption from a security and data-risk perspective • Own AWS security posture and enforce baselines across Linux/Windows, network devices, and enterprise SaaS • Partner with IT to protect corporate identity, endpoints, and enterprise SaaS, including automated access reviews, offboarding checks, and vendor onboarding • Engineer, configure, and operate EDR, DLP, and endpoint security programs • Provide IAM architecture expertise across identity and access systems • Mentor junior and mid-level security engineers through design reviews, pairing, and direct feedback • Define and drive security engineering standards across the organization • Collaborate with IT operations, platform, and software teams to translate threat intelligence into detection and hardening priorities • Report directly to the VP of InfoSec and IT and partner with software, platform, infrastructure, data, and compliance teams

🎯 Exigences

• Software engineering or strong scripting background (Python, Go, Typescript, or shell): you write production-quality code, keep it in version control, and would rather ship a tool than file a ticket • Depth in one or more specializations: AI Security, Product Security, Detection & Response • 8+ years in security engineering with demonstrated growth into technical leadership • Breadth and hands-on SIEM experience (DataDog, ELK, or equivalent) • Breadth and hands-on AWS security and IAM expertise • Breadth and hands-on Product security fundamentals: threat modeling, SAST/DAST, secure SDLC • Experience building with AI/LLM APIs and practical knowledge of LLM security risks • Breadth and hands-on experience with EDR, DLP, and vulnerability management • Breadth and hands-on experience with containerized workloads and Kubernetes security • Proven track record of mentoring engineers and raising team capability • Startup or scale-up experience in regulated SaaS (healthcare, fintech, or similar) (nice to have) • CISSP, GIAC, or OSCP certification (nice to have) • MITRE ATT&CK knowledge applied to detection engineering (nice to have) • "Security as code" experience (OPA, Checkov, tfsec, or similar) (nice to have) • Data science or anomaly detection skills applied to security telemetry (nice to have) • Healthcare industry background (HIPAA, HITRUST) (nice to have) • Experience with Kubernetes/EKS, Terraform/Terragrunt, Atlantis, Cloudflare, Buildkite, Wiz, Semgrep, EscapeTech, GitHub Advanced Security, Datadog, HashiCorp Vault, N8N, Snowflake, and Linear (nice to have)

🏖️ Avantages

• Curative Health Plan (100% employer-covered medical premiums for you and 50% coverage for dependents on the base plan.) • $0 copays and $0 deductibles (with completion of our Baseline Visit) • Preventive and primary care built in • Mental health support • One-on-one care navigation • Chronic condition programs (diabetes, weight, hypertension) • Maternity and family planning support • 24/7/365 Curative Telehealth • Pharmacy benefits • Comprehensive dental and vision coverage • Employer-provided life and disability coverage with additional supplemental options • Flexible spending accounts • Generous PTO policy plus 11 paid annual company holidays • 401K for full-time employees • Generous Up to 8–12 weeks paid parental leave, based on role eligibility.