Senior Security Engineer, Bicycle Health
$150-176.5k
+ Equity
Virtual addiction medicine clinic
Open for applications
Virtual addiction medicine clinic
201-500 employees
Open for applications
$150-176.5k
+ Equity
201-500 employees
Company mission
Bicycle Health's mission is to provide accessible opioid use disorder treatment so individuals can quickly start life saving treatment and regain control of their lives.
Role
Who you are
- 5+ years of experience as a Senior Security Engineer or similar role in information security compliance
- Extensive knowledge of healthcare data privacy and security regulations, or a strong passion to learn them quickly
- A track record of turning security from a cost center into a strategic enabler
- Advanced certifications (CISSP, CISM, HITRUST CCM) that demonstrate deep expertise
- High levels of ownership, drive, and craftsmanship
- A collaborative spirit that turns risk management into a team sport
- Strong understanding of security governance frameworks
- Excellent communication and interpersonal skills
- Ability to translate technical concepts for non-technical stakeholders
- Demonstrated impact and experience with:
- Consistent access to a private work environment with high speed internet and professionally appropriate surroundings for frequent video conferencing and a workstation setup conducive to remote work needs
What the job involves
- We're seeking a Senior Security Engineer who doesn't just manage risks, but anticipates and neutralizes them before they ever become threats. This isn't just a job—it's a mission to transform healthcare security from the inside out
- The Senior Security Engineer is responsible for taking our foundational security and compliance practices to the next level. This role will create security policies that don't just comply, but inspire confidence and show how to lead an Information Security Committee that's more like a strategic think tank than a routine meeting
- The Senior Security Engineer takes information security and regulatory compliance from a burden into a competitive advantage, and develops training programs that make cybersecurity engaging and understandable
- You will be working across the entire company and operating with the authority of the Chief Technology Officer, and are the bridge between technical intricacies and business objectives
- Collaborate across the company and with the executive team to align security strategies to business objectives
- Lead development and maintenance of company-wide information security policies and programs
- Manage compliance with healthcare regulatory requirements (HIPAA, 42 CFR Part 2)
- Run the Information Security Committee forum and manage our security risk register
- Conduct regular security compliance audits and risk assessments
- Develop and implement security awareness and training programs
- Oversee vendor security assessments and third-party risk management
- Create and maintain documentation for security controls and compliance frameworks
- Prepare compliance reports for leadership and external auditors
- Work with our IT MSP and external consultants on security matters (penetration tests, configuration hardening, audits, etc.)
- Run the Information Security Incident Response procedures
- Run annual Business Continuity and Disaster Recovery tabletop exercises
- Respond to vendor security questionnaires
- Work with the internal technology teams on cloud security, threat modelling and specification reviews
- Regular and predictable attendance is required
- All other duties as assigned
- This is a full-time (40hrs per week) remote position
Our take
The US Opioid Epidemic isn’t decreasing in severity unfortunately, with only 10% of people with addictions diagnosed or receiving treatment, and a 15% rise in opioid related deaths in recent years.
Stigma is a huge barrier to seeking treatment, while geography also plays a key role, with many parts of rural USA lacking treatment facilities. Bicycle Health is on a mission to overcome these hurdles by providing virtual treatment, affording more privacy and greater access to patients.
There’s been a noticeable outbreak of startups aiming to tackle addiction over the last few years – part of the greater trend in the growth of mental health support platforms – with the likes of Pear Therapeutics and Quit Genius attracting venture capital support.
Bicycle Health is holding its own in the market however, and having joined Cigna Evernorth’s nationwide behavioral health network, as well as securing a number of strategic partnerships with health and insurance providers, the startup is aiming to significantly expand its footprint.
Kirsty
Company Specialist at Welcome to the Jungle
Insights
Company
Funding (last 2 of 5 rounds)
Jan 2025
$16.5m
LATE VC
Sep 2022
$5m
SERIES B
Total funding: $103.8m
Company benefits
- Work remotely: 100% remote work environment with flexible hours. Live and work wherever you feel happiest.
- Salary: Our salary formula adjusts to your cost of living and experience.
- Technology: Get hooked up with the tools you need to be efficient in your work.
- Health: Medical, Dental and Vision coverage through United Healthcare (100% employer paid option available).
- Time Off: Discretionary PTO, 8 Paid Holidays, 144 hours of Paid Sick leave.
- Research: We support all staff in academic publishing.
- Equity incentive plan
- 401k
- Talented and fun coworkers who are passionate about addiction treatment.
- The opportunity to be part of a mission driven company and make a difference in patients’ lives.
Company HQ
Chinatown, Boston, MA
Leadership
Ankit Gupta
(CEO)Former Assistant Researcher at the Stanford University School of Medicine. Co-founded Pulse News in 2010, which was later integrated with LinkedIn, before becoming LinkedIn's Principal Product Manager of Connected Enterprise. Is the Co-founder of Docs and Hackers, a community-led group of medical practitioners and software builders.
Share this job