
11 - 50 employees
🏥 Healthcare
💳 Fintech
Healthcare • Fintech
Zest Health is a consumer-focused mobile health solution and concierge empowering members to get the most out of their healthcare benefits. Their mobile app and concierge service utilize personalization to reimagine how members access and navigate their healthcare choices, tailoring the experience to each member’s benefits, cost profile, and preferences.
🔥 7 minutes ago
🇺🇸 United States – Remote
⏰ Full Time
🟢 Junior
🟡 Mid-level
👮♂️ Cybersecurity / Security Engineer
🚫👨🎓 No degree required
👻 Ghost score 15%
Where this job comes from
Posted on Zest Health's careers page, not through a job board
First seen by Remote Rocketship 7 minutes ago
Still open on Zest Health's site. Checked 5 minutes ago.

11 - 50 employees
🏥 Healthcare
💳 Fintech
Healthcare • Fintech
Zest Health is a consumer-focused mobile health solution and concierge empowering members to get the most out of their healthcare benefits. Their mobile app and concierge service utilize personalization to reimagine how members access and navigate their healthcare choices, tailoring the experience to each member’s benefits, cost profile, and preferences.
• Administer Okta applications, SSO, MFA, groups, and access policies • Own access provisioning and deprovisioning across organizational systems • Manage employee onboarding and offboarding from laptop issuance through access removal • Run regular access reviews and maintain least privilege • Automate identity workflows using Okta Workflows, scripting, and AI-assisted tooling • Manage MDM enrollment, device policies, encryption, patching, and endpoint compliance • Maintain inventories of devices, applications, accounts, and licenses • Serve as the first point of contact for employee IT and security questions • Operate the compliance program, including control monitoring, evidence collection, audit preparation, and auditor coordination • Own policy approvals and annual policy reviews • Administer HIPAA and security awareness training and track completion • Create and maintain compliance processes, policies, and incident notification procedures • Track relevant vulnerabilities and vendor advisories and drive remediation • Respond to client security assessments and questionnaires and maintain reusable answers • Support client audits and security reviews • Partner with Engineering on application security standards, dependency and vulnerability scanning, and penetration test coordination • Track application security findings through remediation and verify critical issues are resolved • Help engineers adopt tools with appropriate access, privacy, and data controls • Help establish safe company-wide AI usage practices • Serve as the corporate IT and security subject-matter expert as the company scales
• 2+ years of experience in corporate IT, systems administration, IT security, security operations, or a related role • Hands-on experience with an identity provider (Okta or similar), including SSO, MFA, and user lifecycle management • Experience with an MDM platform (Kandji, Jamf, Intune, Mosyle, or similar), ideally in a primarily macOS environment • Experience with employee onboarding and offboarding, access provisioning, and access reviews • Familiarity with SOC 2 or a similar compliance framework, including controls, policies, and evidence • Working knowledge of least privilege, endpoint security, vulnerability management, and incident response basics • Clear written communication • Fluency with LLM tools, specifically Claude and Gemini, and judgment to verify their output • Good judgment balancing security, usability, and speed • Comfort operating within a broad function, learning quickly, and solving problems directly • Commitment to work Eastern Timezone hours • Must be authorized to work in the U.S. without sponsorship; role is not eligible for visa sponsorship • Preferred: experience supporting a SOC 2 audit from readiness through report • Preferred: experience with HIPAA or another healthcare compliance requirement • Preferred: experience with Vanta, Drata, Secureframe, or similar • Preferred: experience responding to client security questionnaires or enterprise diligence requests • Preferred: ability to automate workflows with scripting, APIs, or modern automation tools • Preferred: comfort opening pull requests for security patches and dependency updates • Preferred: familiarity with AWS, GCP, or Azure cloud identity and security • Preferred: experience as an early IT or security hire at a growing startup
• Equity grants • Retirement plan matching • Employer-sponsored medical, dental, and vision plans • Opportunity to grow into senior security, GRC, or IT leadership roles • Meaningful work alongside dynamic, mission-driven teammates • High-growth startup environment • LLM tooling and MCP connections to Vanta and other systems • Remote work arrangement
Apply NowImprove your chances of getting an interview by checking your resume score before you apply.
🔥 7 minutes ago
Mid-Level Cybersecurity Engineer supporting federal clients’ A&A, RMF, and FISMA compliance. Maintaining authorization packages, SSPs, POA&Ms, SARs, and continuous monitoring documentation.
🇺🇸 United States – Remote
💵 $110k - $120k / year
⏰ Full Time
🟡 Mid-level
🟠 Senior
👮♂️ Cybersecurity / Security Engineer
🔥 42 minutes ago
Security Engineer securing TP’s U.S. Government operations through threat assessment, incident response, and compliance. Implementing NIST, FISMA, RMF, and Defense Industrial Base security controls remotely.
🇺🇸 United States – Remote
💵 $95k - $100k / year
⏰ Full Time
🟢 Junior
🟡 Mid-level
👮♂️ Cybersecurity / Security Engineer
🔥 46 minutes ago
Cybersecurity Engineer building automated AWS and Kubernetes security for Lumin Digital’s cloud-native digital banking platform. Developing AI-assisted workflows, cryptographic lifecycles, telemetry, and compliance automation.
🇺🇸 United States – Remote
💵 $135k - $155k / year
⏰ Full Time
🟡 Mid-level
🟠 Senior
👮♂️ Cybersecurity / Security Engineer
🔥 1 hour ago
Security & Trust Engineer protecting AssetWatch’s industrial condition-monitoring platform. Owning customer security reviews, SOC 2 compliance, and security operations across a remote team.
🇺🇸 United States – Remote
💵 $126k - $140k / year
⏰ Full Time
🟡 Mid-level
🟠 Senior
👮♂️ Cybersecurity / Security Engineer
🔥 1 hour ago
IT Security Engineer supporting USDA cybersecurity operations through vulnerability scanning, Tenable administration, and security control assessments. Maintaining secure enterprise systems for a digital transformation and mission support company.
🇺🇸 United States – Remote
💵 $75k - $100k / year
⏰ Full Time
🟡 Mid-level
🟠 Senior
👮♂️ Cybersecurity / Security Engineer