Staff Cloud Security Engineer, Ro
$200-245k
+ Equity
More information about location
Telehealth primary care platform
Open for applications
Telehealth primary care platform
501-1000 employees
Open for applications
$200-245k
+ Equity
More information about location
501-1000 employees
Company mission
To help patients achieve health goals by delivering the most convenient and effective care possible.
Role
Who you are
- 7+ years of experience in cloud security engineering and architecture, with advanced expertise in AWS, Azure, or Google Cloud Platform
- Deep understanding of cloud security principles and best practices, with proven experience in implementing and managing cloud-native security tools at scale
- Extensive knowledge of fundamental security technologies, including firewalls, IDS/IPS, endpoint protection, IAM, encryption, and DLP
- Expertise with key tooling: Cloud Security Posture Management (CSPM), Cloud Native Application Protection Platforms (CNAPPs), Cloud Workload Protection Platforms (CWPPs) and Data Security Posture Management (DSPM)
- Expertise in securing and hardening cloud workloads, including containers, serverless architectures, and virtual machines, with a track record of enhancing security posture
- Advanced experience with Infrastructure as Code (IaC) tools like Terraform, CloudFormation, and Pulumi, and expertise in integrating security into CI/CD pipelines
- High proficiency in programming or scripting languages for developing complex security automation solutions
- Comprehensive understanding of cloud and network security, with experience in securing cloud architecture across multiple environments
- Demonstrated ability to perform in-depth security reviews of SaaS product architecture and its supporting infrastructure, with a focus on driving improvements
- Familiarity with and ability to implement compliance standards HIPAA, HITRUST, CIS, NIST 800-53 and others with a low-touch approach
- Strong leadership and communication skills, with a proven track record of collaborating with cross-functional teams, including product teams and developers, to drive a security-first culture, effect change across the organization and further the cloud security roadmap
What the job involves
- In this role, you’ll have direct influence on strategic initiatives, providing the engineering expertise necessary to make confident, scalable, secure, and privacy-respecting decisions—all while employing a hands-on builder mindset to “build it in.”
- This role is a senior-level individual contributor position, where you’ll serve as a hands-on technical expert, building internal products and infrastructure to protect Ro’s cloud security posture and meet compliance objectives
- As a key member of the Product Security team, which comprises expertise in product security, cloud security, architecture, and privacy engineering, you will design and automate scalable architectures and tools
- You will be the technical advocate for cloud security decisions, driving discussions and designs, and working closely with Ro’s infrastructure and engineering teams to make secure infrastructure solutions. You are an expert communicator and a kind, team player
- Maintain and Operate Secure Cloud Infrastructure: Lead the ongoing maintenance and operation of secure cloud infrastructures, focusing on AWS and cloud-native technologies. Ensure environments are resilient, compliant, and secure through multi-layered protection strategies
- Cloud Native Application Protection: Secure applications built for cloud environments by automating security assessments, monitoring runtime environments, and integrating security practices into the development lifecycle. Focus on containers, serverless architectures, and virtual machines, adapting to emerging threats
- Cloud Workload and Data Protection: Implement robust security controls for cloud workloads and data, including containers, virtual machines, and serverless architectures. Protect against threats while maintaining performance and scalability, using encryption, data loss prevention, and access controls
- Kubernetes and Cloud Security Hardening: Lead security hardening across all cloud security layers, with a focus on Kubernetes clusters and cloud-native environments. Secure container runtimes, implement stringent network policies, manage secrets securely, and ensure resilience against attacks at scale
- Collaborate on Secure Platform Solutions: Partner with infrastructure, product security, security engineering, and engineering teams to design and implement secure platform solutions. Provide expertise in developing Infrastructure as Code (IaC), CI/CD pipelines, and deployment processes, ensuring security is integrated throughout the development lifecycle
- Automation of Security Operations: Develop and deploy automation solutions to enhance security operations, reduce manual efforts, and ensure consistent security practices. Create reusable templates and modules for secure infrastructure to enable rapid, secure deployments
- Security Incident Response: Contribute to incident response efforts, including detection, analysis, containment, and recovery. Work with internal and external stakeholders to minimize the impact of incidents and prevent future occurrences
- Compliance, Risk Management, and Data Governance: Ensure cloud infrastructures comply with standards such as SOC 2, HIPAA, and HITRUST. Implement automated compliance checks, data governance practices, and reporting to maintain alignment with these frameworks and protect data integrity
- Technical Leadership and Mentorship: Act as a technical leader and mentor, promoting a security-first mindset. Guide best practices in cloud security and data protection, and integrate secure practices into the organization’s culture and processes
Our take
Ro is a healthcare startup that connects patients directly to physicians, nurses, and pharmacists. The founders of Ro established the company because they felt that health insurance wasn’t working as it should, as the pooled cost of expensive treatments means that the price of individual doctor visits is inflated.
Ro’s primary care platform powers a personalized, end-to-end healthcare experience from diagnosis, to delivery of medication, to ongoing care. Instead of having to travel to a doctor’s office, Ro customers can access a video conference with a physician on-demand, from the comfort of their own home.
In order to tap into the global medical market, which is worth over $4 trillion, Ro raised $150 million at a valuation of $7 billion in 2022. It has expanded to more health areas, such as skincare and mental health, and launched an online pharmacy. Despite this, a substantial number of layoffs in spring 2022 indicated that Ro's accelerated growth had caused problems with its internal organization. Having now narrowed its focus and spending more on less, Ro has streamlined its operations and looks to continue on a steady upward trajectory.
Kirsty
Company Specialist at Welcome to the Jungle
Insights
Some candidates hear
back within 2 weeks
5% employee growth in 12 months
Company
Funding (last 2 of 6 rounds)
Feb 2022
$150m
LATE VC
Mar 2021
$500m
SERIES D
Total funding: $1.0bn
Company benefits
- Medical, dental, and vision membership
- Equity for all team members
- Flexible time off
- Paid parental leave, and flexible work arrangement
- Well-stocked office with snacks and bi-weekly free lunches
- Gym, learning, and development stipends
Company values
- Fight for patients: Always start with what patients want. Your curiosity drives you to understand their motivation and the goals they are trying to achieve. Work backwards from there. Fight for the healthcare they deserve and move mountains to make it happen
- Think big: Challenge the status quo. You're here to revolutionize healthcare for patients. Dream big. Come up with bad meeting ideas. We love them. Let's invent together
- Inch by inch: Improve every day - yourself, your team and your work. Constantly raise the bar. Focus on the inputs of the patient experience and, over a long enough time horizon, those small improvements compound and you will change the world
Company HQ
Chelsea, New York, NY
Articles
Leadership
Zachariah Reitano
(Co-Founder)Previously a Teacher at General Assembly and co-founder of Shout Inc., in 2013. They are now an Entrepreneur in Residence at Prehype.
Saman Rahmanian
(Co-Founder & Chief Product Officer)Previously a Senior Art Director at Crispin Porter + Bogusky and founder of Tischen in 2010. They were also a Partner at Prehype and founder of Managed by Q.
Rob Schutz
(Co-Founder & Board Member)Founder of Snagged.com. Experienced as a Senior Consultant at CGI specializing in healthcare, they also served as Director of US Marketing and USer Acqusition at kgb and as VP of Growth at BARK.
Share this job
View 12 more jobs at Ro