Senior Security Engineer

November 13

Apply Now

Receive Emails with Similar Jobs

Thyme Care

WebsiteLinkedInAll Job Openings

Healthcare Insurance • Wellness

Thyme Care is a company dedicated to transforming cancer care by providing personalized cancer care navigation and clinical wraparound support. The company collaborates across the cancer care community to improve access, experience, and reduce the costs of cancer treatment for its members. Thyme Care supports its members with a dedicated team of cancer experts and smart tools that proactively manage symptoms and connect members to resources such as transportation, bill assistance, and other necessary services. They offer 24/7 virtual support and work with an extensive network of healthcare providers to deliver high-quality oncology care. Thyme Care's approach focuses on comprehensive care and collaboration with health insurance plans and providers to enhance care outcomes while controlling healthcare expenses.

51 - 200 employees

⚕️ Healthcare Insurance

🧘 Wellness

📋 Description

• Proactively identify and close gaps in cloud, network, and application security architecture • Lead security reviews of code and infrastructure, conduct threat modeling and partner with Eng squads on secure-by-default design • Configure, tune, and monitor key security tools (e.g., Nightfall, GuardDuty, endpoint agents) to surface actionable alerts • Triage and approve incoming security-related requests (applications, packages, Chrome extensions) • Own technical response during a live security incident – from triage and log analysis to containment – in partnership with CISO, Engineering, and IT • Build additional and low-friction security automation into CI/CD pipelines (dependency checks, SAST/DAST, IaC scanning) • Partner with engineers to establish best practices and elevate secure coding practices without slowing delivery

🎯 Requirements

• Experience in application and infrastructure security, ideally in a healthcare or regulated environment • Expertise with cloud security (AWS), IAM, CI/CD pipelines, and core security tools • Background in securing public-facing APIs, web apps, and data platforms • Knowledge of security monitoring, alerting, and incident response practices • Ability to triage and operationalize security requests with pragmatism and rigor • Comfortability working in fast-paced, scaling environments where priorities shift quickly.