Staff Endpoint Security Engineer, Included Health
$174.3-320.1k
Salary varies depending on location. Plus equity
Digital healthcare provider
Be an early applicant
Digital healthcare provider
1001+ employees
Be an early applicant
$174.3-320.1k
Salary varies depending on location. Plus equity
1001+ employees
Company mission
To raise the standard of healthcare for everyone, everywhere.
Role
Who you are
- Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field
- 5+ years of experience in endpoint security, with a strong emphasis on designing, building, implementing, and managing security controls, detection mechanisms, and defensive capabilities across a diverse range of endpoint operating systems (Windows, macOS, iOS, Android)
- Proven hands-on experience with leading Endpoint Detection and Response (EDR/XDR) solutions (e.g., CrowdStrike, SentinelOne, Microsoft Defender for Endpoint, Carbon Black) for threat detection engineering and security policy enforcement
- Demonstrable experience with Mobile Device Management (MDM) / Unified Endpoint Management (UEM) platforms (e.g., Microsoft Intune, Jamf Pro, VMware Workspace ONE, Kandji, MobileIron) for enforcing security configurations and policies
- Strong knowledge of endpoint hardening techniques, security configuration management, and policy enforcement across multiple OS platforms, with a focus on building resilient systems
- Experience designing and implementing endpoint Data Loss Prevention (DLP) strategies and tools
- Proficiency in scripting languages (e.g., Python, PowerShell, Bash) for automating endpoint security tasks, tool integrations, and deployment of defensive measures
- Experience with endpoint attack vectors, malware, persistence mechanisms, and designing effective mitigation and detection techniques
- Experience with endpoint vulnerability management, patch management processes, and tools, focused on proactive remediation
- Experience with network security principles (TCP/IP, DNS, DHCP, VPNs, firewalls) as they relate to designing and implementing endpoint security controls
- Experience working in regulated environments and a strong understanding of HIPAA compliance requirements as they apply to endpoint protection and data handling
What the job involves
- The Staff Endpoint Security Engineer is a critical, hands-on technical role responsible for designing, implementing, and maintaining robust security controls and detection mechanisms across all company and Bring-Your-Own-Device (BYOD) endpoints, including laptops, desktops, mobile phones, and other devices used by staff and contractors
- This role is pivotal in protecting Included Health's sensitive data, particularly Protected Health Information (PHI), by preventing unauthorized exfiltration from endpoints and ensuring the security of devices accessing company resources
- You will be instrumental in architecting and deploying advanced endpoint defenses, managing security tools, and contributing to threat response to reduce the number and criticality of HIPAA-related incidents
- We are looking for deep technical expertise in endpoint security across diverse operating systems (Windows, macOS, ChromeOS, iOS, Android), strong automation skills for building and maintaining defenses, and a proactive approach to identifying and remediating vulnerabilities
- This is a remote role reporting to the Chief Information Security Officer
- Develop, implement, and maintain a comprehensive endpoint security strategy, architecture, and roadmap covering all corporate and BYOD endpoints, with a focus on proactive defense and detection engineering
- Design and enforce security configurations, hardening standards, and baselines for diverse operating systems (Windows, macOS, ChromeOS, iOS, Android, and potentially others) to minimize attack surfaces
- Lead the selection, deployment, administration, and optimization of endpoint security solutions, including Endpoint Detection and Response (EDR/XDR) for threat detection, Mobile Device Management (MDM/UEM) for policy enforcement, Data Loss Prevention (DLP) for data protection, anti-malware, and endpoint encryption
- Develop and implement robust DLP policies and controls to prevent PHI and other sensitive data from leaving authorized systems via endpoints
- Manage endpoint encryption technologies (e.g., BitLocker, FileVault, mobile encryption) to ensure data at rest is protected
- Proactively look for threats on endpoints to identify gaps in defenses and inform the development of new detection capabilities
- Support and provide expertise during incident response activities for endpoint-related security events, with a focus on root cause analysis to enhance preventative and detective controls
- Conduct vulnerability assessments, manage endpoint patching and remediation efforts to address identified weaknesses in a timely manner, strengthening overall endpoint resilience
- Develop, document, and enforce endpoint security policies, standards, and procedures, particularly for BYOD environments, ensuring compliance with HIPAA and other relevant regulations
- Automate endpoint security tasks, compliance checks, defensive measure deployments, and reporting using scripting languages (e.g., Python, PowerShell, Bash) and security orchestration tools
- Collaborate closely with IT operations, network security, application development, and legal/compliance teams to ensure a cohesive security posture and integrate endpoint defenses
- Provide expert consultation and support to end-users and IT staff on endpoint security matters and best practices
- Stay current with the latest endpoint threats, vulnerabilities, and security technologies to continuously improve our defenses
Our take
As the name suggests, Included Health is on a mission to raise the standard of healthcare for everyone, offering inclusive, integrated virtual care and navigation.
It differentiates itself from competitors with its emphasis on improving health outcomes and challenges faced by communities including LGBTQ+ and BIPOC. The negative healthcare experiences faced by these marginalised groups means they often avoid care at a rate that is around 3x greater than the border US population, putting their health at risk.
With healthcare still fragmented and focused on one-size-fits-all solutions, Included Health is disrupting the market by using technology to match patients quickly with the best care, no matter where they live. It currently counts retail behemoths Walmart and Home Depot as customers.
Freddie
Company Specialist at Welcome to the Jungle
Insights
16% employee growth in 12 months
Company
Funding (last 2 of 6 rounds)
Sep 2020
$175m
GROWTH EQUITY VC
May 2018
$66m
SERIES D
Total funding: $347m
Company benefits
- Comprehensive medical, dental and vision plans
- All employee spouses and children can access Included Health services at no cost
- For time off, take it when you need it with our unaccrued discretionary time off for all exempt employees
Company HQ
Financial District, San Francisco, CA
Leadership
Owen Tripp
(CEO & co-founder)Previously served as a Senior Consultant at Accenture before joining eBay as the Manager and Founder of User Behaviour Intelligence in 2004. Co-founded Reputation.com in 2006, and served as its COO from 2008 to 2012. Was an Advisor at Pathbrite and Life360.
Lawrence "Rusty" Hofmann
(Co-Founder)Studied Medicine at Ohio State, Johns Hopkins and Stanford. Was Assistant Professor at Johns Hopkins from 2000 to 2005, and is now Professor of Interventional Radiology at Stanford. Co-founded Grand Rounds, rebranded to Included Health, in 2012. Is Medical Director at Stanford Health Care.
Share this job
View 18 more jobs at Included Health