Staff Security Engineer, Pomelo Care
$200-220k
+ Generous equity compensation
National leader in evidence-based healthcare for women and children
Open for applications
National leader in evidence-based healthcare for women and children
101-200 employees
Open for applications
$200-220k
+ Generous equity compensation
101-200 employees
Company mission
To advance research and technology to break barriers and improve outcomes.
Role
Who you are
- 10+ years of hands-on experience in cybersecurity with a robust software engineering foundation
- Direct hands-on expertise in at least 2-3 key security areas (IAM, Application Security, Cloud Security, CI/CD security, Incident Response, etc.)
- Curiosity and openness to learn new cybersecurity domains that may not be familiar
- Direct experience working in some parts of the full technology stack including Google Cloud Platform (GCP), Kotlin, React/Next.js, Swift, Expo, XCode, Android Studio, yarn, npm, Code Build, among others
- Previous cybersecurity experience within healthcare environments and startups, demonstrating familiarity with regulatory frameworks (e.g., HIPAA) and supporting security certifications such as SOC 2 Type 2 and HITRUST
- Strong technical background including full stack software development, system architecture and security fundamentals such as PKI, SAML, JWT, HMAC as well as MITRE ATT&CK and D3FEND frameworks and OWASP top ten mitigations
- Proven ability to thrive in agile environments, adapting quickly and wearing multiple hats to help scale security programs
- Strong problem-solving skills, excellent communication abilities, and a collaborative mindset
- Relevant industry certifications (e.g., CISSP, CISM, CCSP) are highly desirable. OSCP is a big plus
- Exceptional communication skills and the ability to convey complex security concepts to non-technical stakeholders
What the job involves
- Pomelo Care is seeking an experienced cybersecurity engineer to mature our security practices and contribute to our mission to ensure that our patients, clinicians and partners trust us implicitly
- This is an exciting opportunity for someone who shares our commitment to information security to be part of a fast-paced environment that will push you to learn while doing
- As a Staff Security Engineer at Pomelo Care, you'll be a key player in shaping our security posture, safeguarding sensitive healthcare data and enabling our engineering teams to build secure and compliant products
- This role requires a versatile generalist with deep technical expertise, excellent software engineering fundamentals and the agility to thrive in a startup environment
- Lead and execute critical cybersecurity initiatives, spanning areas like IAM/RBAC, Application Security, Cloud Security, Endpoint Security, CI/CD and supply chain security, SAST/DAST tooling, penetration testing, bug bounty management, Incident Response, DFIR and SaaS security
- Develop and implement security solutions and frameworks that proactively mitigate risks and address evolving threats
- Collaborate cross-functionally with engineering, product, compliance and executive teams to drive adoption of security best practices
- Own and continuously improve secure software development lifecycle (SDLC) processes and tools
- Serve as a subject matter expert and mentor, guiding and educating teams on cybersecurity principles, secure coding and threat modeling
- Participate directly in incident response activities, investigations and post-incident analysis
- Demonstrate humility, entrepreneurial spirit, strong communication skills and comfort contributing to a dynamic, cross-functional environment
- This role plays a pivotal part in fortifying Pomelo Care's security foundation, ensuring the confidentiality, integrity and availability of our information assets. If you are a seasoned security professional, we invite you to join our dynamic team and contribute to our ongoing commitment to information security excellence
Our take
Pomelo Care, a New York-based virtual maternity care platform, is dedicated to enhancing maternal and newborn health outcomes by providing accessible and personalized care. By merging evidence-based practices with innovative technology, the company strives to transform the landscape of family care.
The platform's model provides continuous, proactive 24/7 care through a dedicated multidisciplinary team. This team utilizes data-driven insights to predict and identify potential risks early, offering personalized and evidence-based care protocols. With convenient access through a mobile app, Pomelo Care provides individuals with the support they need, while simultaneously reducing the strain on emergency resources and lowering the risk of complications during pregnancy, postpartum, and infancy.
The company is poised to see further platform adoption, with 2024 funding enabling it to strengthen its existing partnerships with Medicaid Managed Care organizations, employers, and academic medical centres. As Pomelo Care continues to extend its reach and impact, its commitment to accessible and personalized virtual care is well set to make a substantial contribution to addressing the national maternal health crisis.
Steph
Company Specialist at Welcome to the Jungle
Insights
124% employee growth in 12 months
Company
Funding (last 2 of 3 rounds)
Jun 2024
$46m
SERIES B
Jun 2023
$33m
SERIES A
Total funding: $87m
Company benefits
- Generous equity compensation
- Unlimited vacation
- Membership in the First Round Network (a curated and confidential community with events, guides, thousands of Q&A questions, and opportunities for 1-1 mentorship)
Company HQ
Civic Center, New York, NY
Leadership
Marta Bralic Kerns
(CEO)Graduated from Harvard University with a Bachelor's Degree in Computer Science. Previously worked as a Software Engineer/Product Manager at Microsoft and as a Business Analyst at McKinsey & Company. Also worked at Flatiron Health in multiple roles, including Senior Vice President of Business Development.
Share this job
View 18 more jobs at Pomelo Care