We all depend on healthcare throughout our lifetimes, for ourselves, and our families and friends, but it is notoriously difficult to navigate and understand. As an industry that comprises 20% of the US economy we think healthcare should work better for all of us. At Collective Health we believe it’s time for a new day in healthcare where as members we are informed and empowered to make the right care choices when the decisions are urgent and critical.
The Senior Security Engineer will lead initiatives that address the company’s—and some of our industry’s—most sophisticated and meaningful security and architectural challenges. You will build relationships across all parts of the business and drive multi-functional initiatives to continuously improve our security and privacy posture and also responsible for building and implementing controls that can scale and optimize as we move into a context-aware security environment.
If you are passionate about our mission and you are an experienced hands-on application and cloud security professional who is excited about developing and leading a broad range of functions at a mission-driven, highly-regulated technology company, this role is for you.
What you'll do:
- Implement security best practices and influence the overall security strategy
- Architect, implement, support and evaluate security-focused tools
- Conduct threat modeling exercises and comprehensive risk assessments
- Design and operate scalable processes to provision cloud access and maintain least-privilege
- Guide engineering teams to build robust solutions that consider security and privacy
- Build security automations in the CI/CD pipeline
- Perform code reviews to identify and remediate security vulnerabilities
- Maintain a reliable infrastructure using technologies such as Terraform and Kubernetes
- Mentor and provide guidance to junior security team members
To be successful in this role, you'll need:
- 4+ years work experience in a Security Engineer role
- Demonstrated leadership in conducting risk assessments and threat modeling
- Excellent communication skills, with the ability to clearly present technical concepts and their implications to both technical and non-technical stakeholders
- Experience with securing cloud (e.g. AWS, GCP) and Kubernetes environments
- Familiarity with common security tools (e.g. static analysis, penetration testing)
- Understanding of common security flaws (e.g. OWASP Top 10)
Pay Transparency Statement
This is a hybrid position based out of one of our offices: San Francisco, CA, Plano, TX, or Lehi, UT. Hybrid employees are expected to be in the office three days per week (Plano, TX) or two days per week (all other locations). #LI-hybrid
The actual pay rate offered within the range will depend on factors including geographic location, qualifications, experience, and internal equity. In addition to the salary, you will be eligible for stock options and benefits like health insurance, 401k, and paid time off. Learn more about our benefits at https://jobs.collectivehealth.com/#benefits
About Collective Health
Collective Health is the leading health benefits platform that brings together medical, dental, vision, pharmacy, and program partners into an integrated solution that better enables employees and their families to understand, navigate, and pay for healthcare. By reducing the administrative lift of delivering health benefits, providing an intuitive member experience, and helping control costs and improve outcomes, the company guides employees toward healthier lives and companies toward healthier bottom lines.
We are an equal opportunity employer and value diversity at our company. We do not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status. Collective Health is committed to providing support to candidates who require reasonable accommodation during the interview process. If you need assistance, please contact recruiting-accommodations@collectivehealth.com.
Privacy Notice
For more information about why we need your data and how we use it, please see our privacy policy: https://collectivehealth.com/privacy-policy/.