Lead Security Engineer, Solace
Patient advocates for navigating healthcare
Be an early applicant
Patient advocates for navigating healthcare
21-100 employees
Be an early applicant
21-100 employees
Company mission
To bring humanity back to healthcare by empowering patients, improving outcomes, and restoring the promise of the US healthcare system.
Role
Who you are
- Experience working in a start-up environment
- 8+ years of experience in web application security or related engineering roles
- Proficiency with secure web development and auditing practices (e.g., input validation, authentication/authorization mechanisms, encryption in transit and at rest)
- Experience with threat modeling, vulnerability scanning tools, and manual security testing
- Familiarity with regulatory/compliance frameworks
- Experience in healthcare or other regulated industries and knowledge of implementing
What the job involves
- We’re looking for a Lead Security Engineer to be our first security engineering hire and build out our security department from scratch
- You will lead the charge in securing our patient-facing and internal web applications. You’ll be responsible for protecting sensitive health data, staying ahead of evolving threats, and shaping the security posture of a platform that directly impacts patients' lives
- This role is a critical hire as we continue to scale, balancing agility and speed with robust, scalable security practices. You will own end to end security processes and implementation
- Own web application security across all our products and services (React, Node.js, PostgreSQL, Heroku)
- Promote a security-first culture within the organization by enforcing secure coding practices
- Analyze new and existing features for potential security risks
- Conduct regular threat modeling, vulnerability assessments, and penetration testing (both automated and manual)
- Work cross-functionally with engineering, DevOps, and compliance teams to ensure HIPAA, SOC 2, and general data privacy adherence
- Monitor, detect, and respond to potential threats in real-time
- Lead investigations of security incidents and breaches and perform root cause analysis and support post-incident remediation and reporting
- Stay current on web vulnerabilities (e.g., OWASP Top 10) and mitigate them proactively
- Help foster a security-first culture through training, documentation, and mentorship providing guidance and training to engineering and product teams on secure development practices
Our take
The US healthcare system is complex and difficult to navigate. This leaves many patients overwhelmed with paperwork and insurance claims, and struggling against limited provider availability.
Solace has set out to tackle this issue, by connecting patients with expert healthcare advocates. These professionals, including former doctors and nurses, offer support and guide patients through their healthcare challenges.
With substantial funding to its name, Solace is in a position to expand its services, grow its network of advocates, and enhance coverage across Medicaid and private insurance plans. Alongside a partnership with Medicare, Solace aims to make healthcare advocacy more accessible and continue empowering patients with expert support.
Kirsty
Company Specialist at Welcome to the Jungle
Company
Funding (2 rounds)
Apr 2025
$60m
SERIES B
Aug 2024
$14m
SERIES A
Total funding: $74m
Company HQ
Centennial, Redwood City, CA
Leadership
Jeremy Gurewitz
(Co-Founder & CEO)Previously a VP at Literati and Imperfect Foods. Prior to that, they were a Senior Manager of Growth at Man Crates and an Associate Portfolio Manager at Lord Abbett & Co.
Sara Sargent
(Co-Founder & CPO)Previously the Head of Brand at Synthesis and Literati. They were also an Independent Creative & Brand Strategist as well as the Lead Content Editor at MV3 Marketing.
Share this job
View 11 more jobs at Solace