Senior Software Engineer, HeartFlow

• We are looking for a builder that loves the challenge of creating reliable security infrastructure that provides a secure happy path and enables teams to build life-saving products
• Able to demonstrate a track record of driving improvements to a company’s infrastructure security posture
• Security Communication – Ability to reason about risk in complex environments and communicate that risk to technical and non-technical audiences
• Programming Skills – Experience delivering automation and integration projects, preferably in Python
• Infrastructure as Code & Cloud – Familiarity with AWS (or equivalent cloud providers) and configuration tools (Terraform, Chef, Ansible). Experience with containerization (Docker, Kubernetes) and orchestration (GitHub Actions or similar)
• Education & Experience – BS in Computer Science (or related degree) or relevant certifications and equivalent experience. 4+ years experience as a software engineer in an information security or infrastructure engineering discipline
• Regulated Environment Readiness – Understanding of—or willingness to learn—compliance, documentation, and quality requirements in medical or similarly regulated fields

Desirable

• The Heartflow Information Security team is responsible for security across our corporate and product environments, protecting our patient data and medical device ecosystem
• The initial focus will be on customizing security detection and automating response but the portfolio of tools and projects spans our cloud infrastructure and will include automation of reporting and compliance
• Develop security monitoring and alerting systems for Heartflow’s global corporate and production systems
• Build and administer security tooling through a combination of AWS infrastructure, customization and integration with vendors
• Collaborate with the Heartflow Platform and SRE teams to implement security strategy for Heartflow’s cloud infrastructure
• Actively participate in Heartflow’s security incident response process
• Drive automation of manual security processes for compliance and reporting