Staff Security Engineer, Rightway
$169-210k
+ Bonus + Equity
Personalized healthcare platform for employees
Open for applications
Personalized healthcare platform for employees
501-1000 employees
Open for applications
$169-210k
+ Bonus + Equity
501-1000 employees
Company mission
To simplify the healtcare experience.
Role
Who you are
- You bring roughly 8 to 12 years of experience in security engineering, including substantial hands-on depth across both application or product security and cloud security
- You have a track record of leading difficult technical work across multiple security domains and helping other engineers improve through direction, coaching, and example
- You stay current on emerging AI security guidance, including the OWASP Top 10 for LLM Applications and the OWASP GenAI Security Project, and have applied that knowledge in real system design
- You have strong AWS security expertise across IAM, networking, encryption, secrets protection, logging, and multi-account design, and you know how to secure infrastructure-as-code and modern delivery pipelines
- You can operate as a senior technical partner to engineering and infrastructure teams on topics such as identity, service hardening, telemetry, and secure configuration
- You can read and reason about application code and system architecture, and you have enough fluency in one or more backend environments such as Ruby, Node.js, or Java to work credibly with developers
- You communicate clearly with both technical and non-technical stakeholders and can explain tradeoffs, priorities, and risk to senior leadership
- Experience in regulated environments such as healthcare, finance, or education is required
What the job involves
- Rightway is hiring a Staff Security Engineer, reporting to the Head of Security, to raise the security maturity of the systems, services, and AWS estate that support a better healthcare experience for our members, clients, and partners
- This is a senior individual contributor role for an engineer who operates comfortably across product, platform, and cloud domains and can serve as the technical anchor for security engineering
- The role is expected to provide architectural judgment, hands-on execution, and day-to-day leadership for the Application Security and Cloud Security functions while helping the team scale with consistency
- This person will work closely with Engineering, Product, Cloud, and Corporate Security to shape how security controls are selected, implemented, measured, and improved across the company
- It is well suited for someone who wants broad scope, visible ownership, and the opportunity to guide both technical decisions and team development in a modern healthcare environment
- Direct the daily execution of the Application Security and Cloud Security functions, balancing near-term delivery, technical quality, and team development
- Establish technical priorities, decision frameworks, and operating expectations for two security disciplines so work is sequenced effectively and aligned to business risk
- Architect and deploy defensive controls for LLM- and AI-enabled capabilities, including protections around prompt handling, retrieval paths, model-connected integrations, sensitive data exposure, and abusive use patterns
- Assess software, services, dependencies, infrastructure, and deployment patterns to identify material weaknesses and drive practical corrective actions with engineering partners
- Raise the resilience of Rightway's AWS footprint across identity boundaries, network segmentation, key management, service configuration, organizational structure, and detective guardrails
- Expand automation for cloud and platform assurance, including infrastructure policy enforcement, configuration review, deployment gating, and runtime visibility in Terraform and CI/CD workflows
- Set the approach for risk-based prioritization by combining severity, exploit likelihood, business criticality, and environmental context so the most meaningful issues are addressed first
- Define durable secure engineering expectations that teams can adopt during design, build, test, and release activities without adding unnecessary friction
- Work with Product and Engineering leaders to shape secure implementation patterns for new platform capabilities, customer-facing features, and AI-driven functionality before those designs are broadly adopted
- Run deep technical reviews for major initiatives, including new services, cloud patterns, external integrations, and emerging architectures that introduce novel attack surface
- Guide authentication, authorization, and trust-boundary decisions for business-critical workflows, including SAML 2.0, OAuth, and OIDC use cases spanning B2B and B2C contexts
- Unify application and cloud control strategy in areas such as secrets usage, identity design, telemetry, service-to-service trust, and deployment architecture so security decisions remain coherent across the stack
- Coordinate with Corporate Security where shared capabilities such as logging, alerting, access governance, or incident visibility require common design and operational support
- Improve the signal quality of detection, validation, and testing approaches so teams can investigate faster and act on higher-confidence findings
- Evaluate, pilot, and operationalize advanced security capabilities, including AI-enabled techniques that improve engineering review, analysis, and remediation outcomes
Our take
Modern healthcare ecosystems are fragmented, so patients have to organize multiple services to get the care they need. This can be complex, time-consuming and expensive, which is why Rightway provides a unified healthcare organizational system to manage employee healthcare benefits better.
The company’s aim is to simplify access to healthcare, whilst also saving users money through price comparison services. Examples of its offerings are a pharmacy services platform that enables employees to access medication via a smartphone app, and the Advocate platform that helps to close care gaps.
The startup serves companies of all sizes, from small businesses to enterprises like Burger King, Popeyes and RBI. It has hundreds of thousands of users across the US, and has raised considerable funding which will enable it to further develop its platform and strengthen its foothold among employers, health plans, third-party administrators and other potential clients.
Kirsty
Company Specialist at Welcome to the Jungle
Company
Funding (last 2 of 6 rounds)
Mar 2024
$108.8m
LATE VC
Mar 2021
$100m
SERIES C
Total funding: $240.8m
Company benefits
- Competitive compensation
- Health Savings Account
- External learning and career development panels
- Hybrid in-office culture and commuter benefits at our NYC HQ
- Full medical, dental, and vision insurance
- 401K
Company HQ
West Village, New York, NY
Leadership
Jordan Feldman
(Co-Founder & CEO)Studied Government and Economics at Harvard before working in investment at Goldman Sachs and Redbird.
Theodore Feldman
(Co-Founder & Chief Medical Officer)Also Chief Medical Officer at Cadence. They studied Medicine at Harvard University and the Albert Einstein College of Medicine. Worked as Medical Director at South Miami Heart Centre and the Head of Cariology at FIU Wertheim College.
Share this job
View 6 more jobs at Rightway