Product Security Engineer

🕒 il y a 28 jours

🇺🇸 États-Unis – Télétravail

💵 $101 405 - $140 400 / an

⏰ Temps Plein

🟢 Junior

👮‍♂️ Cybersécurité / Ingénieur Sécurité

🚫👨‍🎓 Aucun diplôme requis

👻 Score fantôme 0%

Ce que ça veut dire : la probabilité que cette offre reste ouverte sans recrutement actif.Comment le lire : 60 % ou plus, on pense que c'est une offre fantôme. Un score plus bas est moins inquiétant.Comment on la calcule : ancienneté, republications, postes ouverts vs taille de l'équipe, rapidité de clôture, et si le salaire est indiqué.À noter : une estimation à partir de données publiques, pas un jugement sur l'entreprise. De vraies offres peuvent avoir un score élevé, alors prenez-le comme un indice, pas comme un fait.

Postuler Maintenant

Trouver des Emplois à Distance Similaires

Configurer une alerte email pour les nouveaux emplois

📊 Vérifiez votre score de CV pour ce poste

Améliorez vos chances d'obtenir un entretien en vérifiant votre score de CV avant de postuler.

Télécharger le CV

Modern Health

Site WebLinkedInTous les Emplois

201 - 500 employés

Fondée en 2017

💼 Conseil

📣 Marketing

🏥 Santé

💰 €74 000 000 Series D en 2021-02

Consulting • Marketing • Healthcare

Modern Health est une plateforme de soins en santé mentale complète qui définit une norme mondiale pour des services équitables à travers le monde. Elle offre une large gamme de soutiens en santé mentale pour les employés, les soins familiaux, et les prestataires de soins de santé par le biais d'outils en autonomie et de soins en cas de crise, avec pour objectif d'augmenter la productivité et de prévenir l'épuisement professionnel. Modern Health collabore avec des employeurs, des consultants et des régimes de santé pour intégrer des avantages en santé mentale au sein des entreprises, répondant ainsi aux besoins à long terme, réduisant l'absentéisme, améliorant l'efficacité opérationnelle et le bien-être. Leurs solutions fondées sur des preuves s'attaquent à une large gamme de préoccupations en matière de santé mentale, promouvant une personnalisation et un accès à des soins centrés culturellement à l'échelle mondiale.

Description

• Analyze security vulnerabilities in web and mobile applications, determine risk levels, and drive remediations with engineering teams • Research and report on potential product threats, emerging vulnerabilities, and mitigation techniques in health tech • Partner with Engineering and Product to integrate security throughout the SDLC and champion secure development practices • Develop and advocate cost-effective solutions for application and product security challenges • Implement product security standards and best practices across the organization, influencing engineering and architecture decisions • Test, audit, and assess application and cloud infrastructure security posture • Guide engineering teams on secure coding standards and provide actionable security feedback • Deploy, optimize, and manage SAST, DAST, HashiCorp Vault, and other application security tooling • Participate in threat modeling for new features and evolving services • Conduct secure code reviews on services and applications • Assist with targeted penetration tests before production release • Collaborate on IT security initiatives covering device management, endpoint protection, access management, and IT hygiene • Partner with DevOps and Infrastructure on cloud architecture, security policies, and cloud-native controls • Report to the Head of Security as part of the Product Security team

🎯 Exigences

• Deep familiarity with secure software development practices, security-focused architecture, and infrastructure aligned with product objectives and business needs • Hands-on experience with vulnerability management, secure code review, threat modeling, and industry-standard application and product security tools • Hands-on experience with at least one scripting language; Python and/or Bash preferred • Ability to work collaboratively with developers, product managers, and cross-functional stakeholders to secure web and mobile applications • Ability to assess, prioritize, and execute projects independently • Excellent written and verbal communication skills • 2–4 years of experience in product/application security or 1–3 years in security-focused software engineering • Experience integrating security into agile product delivery • Experience reviewing code changes with software engineers and providing security feedback • Experience building or applying security controls for AI systems and using AI to improve security engineering workflows • Experience assessing and improving AWS cloud posture through IAM and access reviews, network and environment segmentation, vulnerability management, centralized logging, detection, and secure CI/CD or Terraform controls • Applicants must be able to maintain work authorization for the duration of employment without employer sponsorship or employer-provided training plans or attestations • Experience with AWS, GitLab CI/CD, Python, PostgreSQL, Redis, Datadog, Sentry, Terraform, and Packer • Bonus: experience at a high-growth startup, with SaaS software, in Health Tech, or in software engineering

🏖️ Avantages

• Medical / Dental / Vision / Disability / Life Insurance • High Deductible Health Plan with Health Savings Account (HSA) option • Flexible Spending Account (FSA) • Access to coaches and therapists through Modern Health's platform • Flexible Time Off • Company-wide Collective Pause Days • Parental Leave Policy • Family Forming Benefit through Carrot • Family Assistance Benefit through UrbanSitter • Professional Development Stipend • 401k • Financial Planning Benefit through Origin • Annual Wellness Stipend to use on items that promote your overall well being • New Hire Stipend to help cover work-from-home setup costs • ModSquad Community: Virtual events like active ERGs, holiday themed activities, team-building events and more • Monthly Cell Phone Reimbursement • Full-time employees are eligible for Modern Health's equity program