Staff Security Engineer, Prenuvo

• 10+ years of experience in backend/platform engineering, with a strong focus or interest in application and infrastructure security
• Knowledge of forward-auth proxies (e.g., OAuth2 Proxy, Traefik, or custom) and secure session management patterns
• Experience working with OAuth2, Auth0, or similar identity management systems at scale
• Hands-on experience implementing API Gateway patterns and managing authentication/authorization at the edge
• Deep understanding of secure coding practices, vulnerability management, and secure cloud architectures
• Familiarity with compliance standards such as HIPAA, ISO 27001, or SOC 2, and how they translate into technical requirements
• Proven experience driving cross-functional security initiatives and working with Security, DevOps, and Product teams
• Expertise in Python (FastAPI or Flask) and modern CI/CD tools (GitHub Actions, CircleCI)
• Experience handling incident response, including RCA and vulnerability remediation planning
• Strong communication and leadership skills with the ability to make progress in ambiguity

Desirable

• We’re looking for a Staff Security Engineer to join our Core Platform team and help lead initiatives that secure mission-critical services such as authentication, PII handling, and health data systems
• This is an impactful, high-leverage role for an engineer who thrives at the intersection of platform engineering and security, and who’s excited to help a fast-growing health tech startup scale securely and responsibly
• You’ll be empowered to make pragmatic technical decisions, lead architectural modernization, and spearhead efforts to harden systems, drive secure development practices, and ensure compliance with regulatory and internal standards
• Help reshape the world through proactive healthcare while working with cutting-edge technology and high performing teams with deep expertise - join us to make a difference in people’s lives!
• Lead the secure architecture and modernization of our core backend services and authentication infrastructure
• Drive redesign of our Auth0 integration using best-practice patterns (e.g., forward-auth, session tokenization, fine-grained scopes)
• Spearhead our transition of services behind AWS API Gateway, designing secure and scalable ingress patterns
• Triage and resolve security issues identified by tools like Aikido, Vanta, and cloud-native services (e.g., AWS Inspector)
• Define and implement secure defaults and infrastructure policies across CI/CD, IaC, and runtime environments
• Conduct threat modeling for new features and services; create reusable models and playbooks for engineering teams
• Collaborate with product and compliance teams to ensure our architecture supports HIPAA, ISO 27001, and other regulatory requirements
• Mentor engineers in secure coding practices, security review processes, and privacy-conscious design
• Own or influence decisions across authentication flows (OAuth2, OpenID Connect), identity federation, and permission boundaries