Security Engineer, Garner Health
$150-180k
+ Equity
Data-powered doctor search tool
Be an early applicant
Data-powered doctor search tool
101-200 employees
Be an early applicant
$150-180k
+ Equity
101-200 employees
Company mission
To transform the healthcare economy, delivering high quality and affordable care for all.
Role
Who you are
- Ability to work autonomously while collaborating with cross-functional teams, can successfully manage multiple projects simultaneously, and effectively communicate technical information to non-technical stakeholders
- In-depth knowledge of auditing cloud infrastructure for security risks, creating solutions that defend against those risks, and designing processes that provide systemic prevention against the risks
- Strong understanding of common application and infrastructure security vulnerabilities and attack vectors as well as techniques for their detection, prevention, and mitigation
- Strong understanding of and proven ability with Terraform in a cloud environment
- Strong understanding of cloud IAM principles and best practices
- Experience with using a SIEM to detect indicators of compromise, identifying the impact, and generating incident reports
- Independent ability to write scripts or automated tooling
- Understanding of network security principles, protocols, and technologies
- Experience with threat modeling cloud-native applications (NodeJS and Python) and data pipelines
- Experience with writing scripts or automation in any of the following languages: Bash, JavaScript, Python, or Golang
- Experience with IAC related tooling, such as Terraform or Pulumi
- Experience with deploying and managing Data Loss Prevention (DLP) tools in a regulated environment
- Proven experience (4+ years) in a security engineering role, preferably in a fast-paced environment such as a technology company or HealthTech company
- Recent experience with our tech stack
What the job involves
- We are seeking a skilled and motivated Security Engineer to join our dynamic team. As a Security Engineer, you will play a crucial role in safeguarding our organization's digital assets, ensuring the integrity and confidentiality of our systems and data
- You will be responsible for the implementation and operations of security tooling with your existing IAC/platform skills, maintaining security controls, and responding to security incidents and breaches
- This role offers an exciting opportunity to work with cutting-edge technology and improve the overall security posture of our organization
- Security Engineering: Design, implement, and operate security tooling and services in cloud (including IAC related components) and on-premises ecosystems including, but not limited to, AWS and GCP, Snowflake, Wiz, Okta
- Incident Detection and Response: Monitor security landscape for suspicious activity, investigate potential security incidents, and coordinate incident response efforts to mitigate threats and minimize their impact
- Vulnerability Management: Assist regular vulnerability assessments and penetration tests, analyze results, and collaborate with relevant teams to prioritize and remediate security vulnerabilities in a timely manner
- Security Compliance: Ensure compliance with relevant security standards, regulations, and best practices (e.g., HITRUST, SOC 2, ISO 27001) through continuous monitoring, auditing, and enforcement of security policies and procedures
- Security Awareness and Training: Develop and deliver security awareness training programs for employees, educate stakeholders on security best practices, and promote a culture of security awareness throughout the organization
- Security Incident Documentation and Reporting: Document security incidents, their resolution, and lessons learned for future reference. Prepare and present regular reports on security metrics, incidents, and trends to management and relevant stakeholders
- Security Tool Evaluation and Integration: Research, evaluate, and recommend new security technologies, tools, and processes to enhance the organization's security posture and capabilities. Integrate new security solutions into existing infrastructure as needed
- Collaboration and Communication: Work closely with cross-functional teams, including IT, engineering, and compliance, to align security initiatives with business objectives, identify security requirements, and ensure the effective implementation of security controls
- Technologies we use:
- AWS and its security tools: CloudTrail, GuardDuty, Control Tower, and Identity Center, Wiz, DataDog SIEM, Socket.dev (or other SCA tools like Trivy), Snowflake, Kubernetes / container security
Our take
An overworked US healthcare system has resulted in long waits and expensive prices. Due to rising costs, the health insurance industry often leads to patients not accessing the care that they need. Garner Health creates digital services that allow patients to find a medical expert that fits their specific needs, whatever their insurance circumstances are.
The startup provides an app that analyses local health-insurance claims history through AI. This data is used to recommend local medical professionals that will work with a patient's circumstances whilst providing direct communication channels for liaising. This helps patients to identify the highest-quality doctors and helps doctors improve how they practice medicine.
Despite other companies providing similar bespoke healthcare services, Garner Health shows a cutting edge by partnering with patient employers. This provides the financial incentive that employers must cover all or a portion of medical expenses, making healthcare financially accessible for all involved. The company has good funding at its back, and in 2022 partnered with Marathon Health towards reducing the inefficiencies of specialty referrals.
Steph
Company Specialist at Welcome to the Jungle
Insights
142% employee growth in 12 months
Company
Funding (last 2 of 3 rounds)
Dec 2021
$45m
SERIES B
Feb 2021
$12.5m
SERIES A
Total funding: $61.3m
Company HQ
Flatiron District, New York, NY
Leadership
Nick Reber
(CEO)They studied Mathematics at Brown before joining Bridgewater Associates as a Senior Investment Associate in 2006. Left Bridgewater in 2016 to join Oscar Health's Leadership Team. Founded Garner in 2018.
Share this job
View 31 more jobs at Garner Health