Staff Security Engineer
R
RedoxHealth Tech
Fully remote team within the U.S.Full-TimeStaff
Salary$190,000 - $200,000 a year
Apply NowOpens the employer's application page
Job Details
- Experience
- 8+ years in security engineering
- Required Skills
- AWSPythonKubernetesTypeScriptTerraformGitHub Actions
Requirements
- 8+ years in security engineering with a track record of Staff-level impact.
- Deep technical proficiency in Kubernetes security, specifically network policy orchestration, admission control (Kyverno), and container hardening.
- Expertise in threat modeling for applications built using Node.js, TypeScript, Python, or Go.
- Proven track record institutionalizing secure SDLC practices and CI/CD safeguards using GitHub Actions.
- Direct experience hardening Infrastructure-as-Code (Terraform) and managing enterprise secrets via AWS Secrets Manager or Vault.
- End-to-end accountability for vulnerability management lifecycles.
- Ability to operationalize compliance frameworks like HITRUST and SOC 2 into pragmatic technical controls.
- Proficiency in AI tools and techniques, including prompt engineering and workflow automation.
- Exceptional written communication skills to influence technical roadmaps in a remote environment.
Responsibilities
- Own Cloud Security Posture Management including Kubernetes and container security strategies, network policies, and environment hardening.
- Manage comprehensive vulnerability lifecycles, prioritizing remediation based on actual production exposure.
- Collaborate with Platform Engineering to institutionalize secure SDLC and CI/CD safeguards, focusing on artifact validity and pipeline integrity.
- Convert HITRUST and SOC 2 compliance frameworks into actionable technical configurations and operational controls.
- Evaluate and secure infrastructure-as-code across all environments.
- Execute incident response duties, encompassing forensic investigation and facilitation of blameless post-mortem analyses.
- Elevate security standards within Engineering through rigorous design reviews, collaborative pairing, and technical mentorship.
- Oversee bug bounty triage and maintain engagement with external security researchers.
View Full Description & ApplyYou'll be redirected to the employer's site
