Staff Security Engineer

🕒 October 7

🇺🇸 United States – Remote

⏰ Full Time

🔴 Lead

👮‍♂️ Cybersecurity / Security Engineer

👻 Ghost score 10%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

OpenLoop

WebsiteLinkedInAll Job Openings

201 - 500 employees

Founded 2020

💼 Consulting

⚖️ Legal

📦 Logistics

💰 $15M Series A - OpenLoop Health on 2023-03

Consulting • Legal • Logistics

OpenLoop is a white-label telehealth platform and managed services provider that helps organizations launch and scale virtual care programs. It combines SaaS-based, brandable technology (scheduling, booking, payments, EHR/API integrations) with clinical staffing, credentialing, payer coverage and RCM, regulatory/legal support, and 24/7 patient support. OpenLoop serves health plans, hospitals and health systems, retailers, employers and digital health companies with AI-powered operations, a nationwide clinician network and broad insurance coverage including Medicare and Medicaid.

📋 Description

• Own engineering of security controls for OpenLoop’s macOS and Windows fleet, including MDM, disk encryption, patch compliance, and local admin controls • Engineer MDM and MAM policies protecting company and PHI data on managed devices and BYOD • Deploy and manage an enterprise browser securing SaaS and web access through data controls, session policies, and extension management • Build, apply, and continuously measure CIS Benchmark baselines across the fleet • Track configuration drift, manage documented exceptions, and produce fleet-level evidence for HITRUST and SOC 2 auditors • Drive application control and least privilege on endpoints • Own Google Workspace email security, including SPF, DKIM, DMARC, phishing and BEC defenses, attachment and link protection, and PHI data loss prevention • Tune security controls to reduce risk and false positives and partner with SecOps on phishing triage workflows • Write security standards, configuration baselines, and runbooks • Implement and validate controls identified through threat modeling and security reviews • Map controls to HITRUST and SOC 2 requirements and own audit evidence • Automate repetitive work through scripting • Mentor SAE and adjacent-team engineers and serve as an incident escalation point • Partner with IT, Engineering, Compliance, and SecOps to translate security risk into business and operational terms • Perform other duties as assigned

🎯 Requirements

• 8+ years in security engineering, with a track record of owning outcomes end to end • Deep, hands-on expertise in endpoint security and email security • Experience deploying and operating MDM/MAM platforms (Kandji, Jamf, Intune, or similar) and email security platforms • Experience deploying and managing an enterprise browser platform • Hands-on experience implementing CIS Benchmarks and measuring compliance against them at fleet scale • Exposure to network security: secure remote access (ZTNA/VPN), DNS filtering, segmentation, or firewall policy • Working knowledge of cloud security fundamentals, including IAM, network controls, logging, and workforce access to cloud environments • Exposure to DevSecOps practices, including infrastructure as code, CI/CD security, secrets management, or security tooling in pipelines • Scripting ability in Python, Bash, PowerShell, or similar • Experience working in a regulated environment (HIPAA, HITRUST, SOC 2, PCI, or similar) and producing audit evidence • Clear written communication; ability to write standards, defend decisions, and explain risks to non-security executives • Relevant certifications such as GIAC, CISSP, OSCP, or cloud security certifications are preferred, not required • Must answer whether visa sponsorship is required now or in the future

🏖️ Benefits

• Medical, Dental & Vision • Flexible Spending / Health Savings Accounts • Generous PTO • Hybrid-work flexibility • 401(k) with Company Match • Life Insurance • Pet Insurance • Competitive compensation