Information Security Engineer, Everly Health
2-5 days a week in office
At-home health testing platform
Open for applications
At-home health testing platform
201-500 employees
Open for applications
2-5 days a week in office
201-500 employees
Company mission
To help anyone improve their health and transform their life through cutting-edge, diagnostics-driven healthcare.
Role
Who you are
- We’re looking for someone that has deep technical expertise in threat detection, incident root cause analysis, querying and alerting using SIEM systems, automation, AWS cloud, and the experience to join a fast-paced, growing team tackling challenging problems at scale
- Naturally curious and interested in security and privacy
- Comfortable engaging with departments outside of engineering to heighten security
- Experience with vulnerabilities, exploits, and their defenses
- Can balance articulating the big picture and details depending on the audience
- Eager and excited to evangelize security
- Knowledge of Cybersecurity Frameworks: HITRUST, NIST, ISO
- Collaborates well with cross functional team members: product, compliance, privacy, and engineering in a fast paced, regularly changing environment
- Is most comfortable when there’s too much to do and can juggle a variety of tasks
- Everyone knows that when you take on a task whether it’s huge and scary or tiny and boring, you’re going to see it through
- BS (or equivalent) in Computer Science, Software Engineering, or related field
- 5+ years of Experience with Cloud security (AWS, Azure, etc.)
- Experience with secure SDLC best practices
- Understanding of authentication protocols and frameworks (OAuth, SSO/SAML, OpenID, etc.)
- DevOps and configuration management with tools like Terraform, Ansible, etc
- Conversant with REST and/or GraphQL
- Experience with Zero-Trust architectures
- Familiarity with common security tools: SIEM, EDR, vulnerability scanning, and secrets management
- Juggled a variety of different responsibilities
- Influenced or inspired cross functional teams to take action around security
- Advanced programming experience (Ruby, Python, Golang, Bash, etc)
- At least one of the following or equivalent certifications:
- Security+ (CompTIA)
- Network+ (CompTIA)
- Microsoft Security Compliance and Identity Fundamentals (SC-900)
- Microsoft Azure Fundamentals (AZ-900)
- AWS Cloud Practitioner
- AWS Security Specialty
- ISSP
What the job involves
- As a member of the security team at Everlywell, you will have the opportunity to shape the security detection, operations and incident response processes
- You will research and discover the latest threats on product, cloud infrastructure, workloads, containers and develop methods, queries, and dashboards to detect and visualize events of interest
- You will develop incident response playbooks to allow quick resolution of identified security events.You'll work across many teams including infrastructure, engineering, product, compliance, and across multiple streams
- Threat Detection: It's important to detect security incidents before they cause material damage to the business. You will detect attacks and prioritize, analyze and drive alerts to resolution. In the event an alert is identified as a security incident, you will kick off
- Incident Response: You will rapidly scope, contain and eradicate threats, minimizing financial, legal, business and content losses. Services include but are not limited to root-cause analysis, memory and disk forensics, reverse engineering, network containment, threat eradication and postmortems. You will also develop and refine processes, plans and procedures and partner closely with Legal, Comms and other stakeholders across the business
- Design and carry out security incident preparedness activities, such as compromise assessments and tabletop exercises, and conduct training and awareness sessions for relevant staff
- Deploy and support tools to collect and correlate security telemetry. Tooling includes Network Detection and Response, SIEM, Endpoint Detection and Response, Threat Intelligence platforms, and Security Orchestration Automation and Response tools
- Design and implement security controls across cloud, network, and application layers
- Drive the adoption of best practices for security through the SDLC
- Build automated guardrails to enhance the security of our applications
- Automate vulnerability management, secrets management, and patching
- AI first mindset for building out Security Automations and Threat Detection
- Educate the engineering team on defensive coding
- Support HIPAA, HITRUST, and SOC2 compliance efforts
- Work with Privacy and Compliance to document and monitor our security practices
- Partner with product engineering teams on secure cloud development practices and build security automation into CI/CD pipelines
- Improve vulnerability management processes and security control maintenanceCollaborate with senior leaders to assess near-term and long-term security needs
- Collaborate with senior leaders to assess near-term and long-term security needs
Our take
Testing for health issues has traditionally been an expensive and slow process for both patient and doctor, and at-home testing is a solution to many of these issues. Everly Health’s platform allows consumers to collect and understand information about their bodies without leaving their homes. The goal is to improve health and well-being and reduce the risk of diseases by increasing the frequency of monitoring.
The at-home test kits include tests for allergies, food issues, colon cancer, and thyroid problems. Built on a model that will allow healthcare to be accessed remotely and virtually, the company has distribution points in over tens of thousands of US retailers.
Competitors include Imaware and LetsGetChecked, but the market for at-home testing could be huge, especially if hospitals move toward this sort of care as a means of reducing wait times and increasing patient monitoring without increasing the cost of patient care. Furthermore, with HealthQuest's venture arm as a partner, Everly Health can expect to see further development of its direct-to-consumer business.
Freddie
Company Specialist at Welcome to the Jungle
Insights
-21% employee growth in 12 months
Company
Funding (last 2 of 6 rounds)
Dec 2020
$175m
SERIES D
Feb 2020
$25m
SERIES C
Total funding: $255.5m
Company benefits
- Comprehensive health plan
- Flexible time off
- Parental and family leave for birth and adoption
- Free and discounted testing for you and your family
- Remote flexibility with home office subsidies
- Headquartered in Austin but hiring everywhere
Company HQ
Congress Avenue Historic District, Austin, TX
Leadership
Julia Cheek
(Founder & CEO)Board Member at Headspace. They were previously a Deloitte Consultant, and worked at the George W. Bush Presidential Center and MoneyGram. In August 2015, they founded Everlywell, serving since as CEO.
Salary benchmarks
We don't have enough data yet to provide salary benchmarks for this role.
Submit your salary to help other candidates with crowdsourced salary estimates.
Share this job
View 9 more jobs at Everly Health