Staff Software Engineer, Dandy

• If you're motivated by significant ownership, making a tangible impact quickly by bringing structure and expertise, and building a mature security posture for a growing company poised for significant impact, this role provides that unique combination
• 8+ years of progressive cybersecurity experience with a proven track record of leading impactful security initiatives or maturing security programs
• Deep strategic and hands-on expertise across security domains, especially vulnerability management, compliance (HIPAA expertise highly valued), and cloud/application security
• Experience assessing existing environments and implementing effective security controls and processes
• Proven success in leading incident response and conducting thorough risk assessments
• Strong analytical skills, excellent communication to champion security across the company, and the drive to operate autonomously and build out a critical function
• Adaptability to apply security principles effectively in a fast-paced, high-growth startup environment

Desirable

• We are offering a distinct opportunity: the chance to be our first dedicated security leader and help establish the formal security and compliance function for our growing dental tech platform
• We have a modern tech stack powering our business, but we need an expert like you to build out the security strategy, mature our processes, implement the right tooling, and foster a strong security culture
• This is your opportunity to take a leadership role with high autonomy and resources, integrating best practices within a rapidly growing organization
• You'll be a key security authority, tackling crucial challenges around protecting sensitive patient data (HIPAA compliance is critical), securing our cloud infrastructure, and embedding robust security within a fast-paced development lifecycle
• Formalize and lead the end-to-end vulnerability management program, implementing appropriate tools, automation, and remediation processes
• Establish and manage our security compliance program, ensuring robust adherence to HIPAA and other relevant standards through policy development, assessments, and audits
• Assess, select, implement, and manage core security infrastructure and tooling tailored to our cloud environment
• Develop and lead Dandy's security incident response capability, ensuring readiness and effective management
• Define, own, and drive the company's security strategy and roadmap, acting as the key security voice to engineering and executive leadership