Our mission is to deliver high-quality primary care that is accessible, convenient and affordable for all. Every single day you’ll be working on challenging problems with an exceptional team to profoundly transform primary care and improve people’s quality of life.
Your Role and Impact
As a product security engineer at 98point6, you will collaborate with internal teams that deal with PHI belonging to a large number of patients and it is imperative that this data is secured. We are building our security team to help safeguard this information, and your work will improve our overall security posture. From testing an application to reviewing the overall network architecture, conducting trainings for our engineering team to writing our own tools to automate a workflow, you will be empowered to do the work that is most important for the organization. You will demonstrate the 98point6 core values daily as part of a unique culture driven to achieve our audacious goals.
Conduct code reviews of our applications and security configuration reviews of our AWS infrastructure
Design, implement, execute and report on penetration tests of our services and infrastructure
Contribute a security perspective to our application and infrastructure design process
Develop threat models for our current and planned systems and infrastructure
Conduct or organize security training and outreach for our development teams
Design and develop security tools to improve our automated monitoring
Identify key performance metrics for security metrics and implement instrumentation for those metrics
Develop and execute our processes for security event incident response
Perform third-party vendor security assessments and verify security compliance of vendors over time
6+ years of experience in the security industry working in any combination of the following areas: threat modeling, secure coding, web and mobile application security, identity management and authentication, software development, cloud security or penetration testing
Experience implementing security solutions in mobile apps, web apps and backend services
Experience writing and reviewing code (Java, Python, Node or similar)
Experience working effectively with software engineering teams
Excellent written and verbal communication skills
Experience responding to security events preferred
98point6 provides equal employment opportunities to all without regard to race, color, religion, sex (including sexual orientation or gender identity), national origin, age, disability, genetic information or other protected status.