Staff Security Engineer

Job not on LinkedIn

🔥 0 minutes ago

🇺🇸 United States – Remote

💵 $190k - $200k / year

⏰ Full Time

🔴 Lead

👮‍♂️ Cybersecurity / Security Engineer

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

👻 Ghost score 0%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Redox

WebsiteLinkedInAll Job Openings

201 - 500 employees

Founded 2014

🏥 Healthcare

⚕️ Healthcare Insurance

☁️ SaaS

Healthcare • Healthcare Insurance • SaaS

Redox is a company specializing in healthcare data interoperability. It provides a platform that facilitates real-time data exchange for vendors, providers, and payers in the healthcare industry. With over 7,300 connected healthcare organizations, Redox enables efficient data exchange and processing, helping to improve patient care and streamline operations. The platform supports massive data transactions, maintains high uptime, and is certified for security standards like HITRUST. Redox is renowned for integrating EHR systems, improving AI and machine learning outcomes, and enhancing patient and member experiences. Its solutions are trusted by key players in the healthcare sector to manage and consolidate healthcare data effectively.

📋 Description

• Own Cloud Security Posture Management, including Kubernetes and container security strategies, admission control, network policies, image integrity, and environment hardening. • Manage comprehensive vulnerability lifecycles and prioritize remediation based on actual production exposure. • Collaborate with Platform Engineering to institutionalize secure SDLC and CI/CD safeguards, focusing on artifact validity and pipeline integrity. • Translate HITRUST and SOC 2 compliance frameworks into actionable technical configurations and operational controls. • Evaluate and secure infrastructure-as-code across all environments. • Execute incident response duties, including forensic investigation and blameless post-mortem analyses. • Elevate security standards within Engineering through design reviews, collaborative pairing, and technical mentorship. • Oversee bug bounty triage and maintain professional engagement with external security researchers. • Take ownership of cloud-native and application security across the Redox platform. • Harden the environment, perform code reviews, and translate control gaps into engineering proposals. • Embed security into the SDLC, define security standards, and ensure secure engineering practices. • Partner with Engineering teams in a fully remote, asynchronous environment. • Identify and drive platform work from scope definition through design and operationalization.

🎯 Requirements

• 8+ years in security engineering with a track record of Staff-level impact through system architecture, leadership of strategic initiatives, and technical mentorship. • Deep technical proficiency in Kubernetes security, specifically network policy orchestration, admission control (Kyverno), and container hardening protocols. • Expertise in threat modeling for applications built using Node.js, TypeScript, Python or Go. • Proven track record institutionalizing secure SDLC practices and CI/CD safeguards using GitHub Actions, ensuring artifact validity and pipeline integrity. • Direct experience hardening Infrastructure-as-Code (Terraform) and managing enterprise secrets via AWS Secrets Manager, Vault, or similar platforms. • End-to-end accountability for vulnerability management lifecycles, encompassing everything from initial triage to final production remediation. • Ability to operationalize compliance frameworks like HITRUST and SOC 2 into pragmatic technical controls that align with engineering workflows. • Exceptional written communication skills with the ability to influence technical roadmaps within a remote, asynchronous organizational culture. • Proficiency in AI tools and techniques, including prompt engineering and hands-on experience across multiple large language model platforms, with a demonstrated ability to automate workflows using AI. • Experience securing autonomous agentic loops and tool-calling frameworks is nice to have. • Understanding of Indirect Prompt Injection and Human-in-the-Loop guardrails is nice to have. • Technical expertise securing the Model Context Protocol (MCP) is nice to have. • Hands-on application of the NIST AI RMF and OWASP Top 10 for LLMs is nice to have. • Go, Node.js, or TypeScript experience is nice to have. • VPN administration or enterprise network security experience is nice to have. • Dependency management tooling (Renovate, Dependabot) is nice to have.

🏖️ Benefits

• 100% remote first culture (must be based in the US) • Unlimited Flexible Time Off • 15+ Observed Holidays • Rest & R^Charge days (guaranteed a 3-day weekend each month) • R^Charge (6 weeks paid sabbatical + stipend) • 401k match 50% for up to 8% on Day 1 • Medical/Dental/Vision Benefits on Day 1 • HSA & FSA, Life, Disability, Medical Travel & Employee Assistance Program • Paid Parental Leave (16 weeks) • Productivity Stipend & Wellness Fund • Redox Issued MacBook • Virtual and/or in-person Team & Company Events • Stock Options • Employee Referral Bonus Program