Senior Application Security Engineer, Virta Health
$192-248k
+ Equity
More information about location
Diabetes reversal treatment
Be an early applicant
Diabetes reversal treatment
501-1000 employees
Be an early applicant
$192-248k
+ Equity
More information about location
501-1000 employees
Company mission
To reverse diabetes and obesity in one billion people.
Role
Who you are
- Deep Application Security Expertise: Significant hands-on experience in application security, including threat modeling, secure coding practices, vulnerability management, and security testing (SAST, DAST, IAST)
- Cloud Security Proficiency: Strong understanding and practical experience securing cloud-native applications and infrastructure, particularly within cloud environments (GCP strongly preferred)
- Maturation Mindset: Proven ability to assess existing security designs and strategically mature them over time, moving beyond basic implementations to robust, resilient systems
- Automation & IaC Skills: Experience building security automation and implementing security controls using Infrastructure as Code (IaC) principles (e.g., Terraform)
- Collaboration & Influence: Excellent communication skills with the ability to clearly articulate complex security concepts to diverse audiences and influence technical direction across teams. You're comfortable advocating for security best practices
- Autonomy & Ownership: A proactive, self-directed approach with a strong sense of ownership. You can identify gaps, propose solutions, and drive them to completion independently
- Pragmatic Approach: Ability to balance security requirements with business needs and development velocity, finding practical solutions that enhance security without hindering progress
- Regulated Environment Experience (Bonus): Experience working in healthcare, fintech, or other highly regulated industries is a plus
- Security Fundamentals: Solid grasp of networking concepts, identity management (IAM), encryption, and common web application vulnerabilities (e.g., OWASP Top 10)
What the job involves
- You'll be the dedicated Application Security Engineer in a growing Foundations team
- As we rapidly scale our impact, we're seeking a passionate and experienced security leader to build and mature our application security program
- You'll have the autonomy to define strategy, implement best practices, and embed security principles across the org
- If you thrive on building secure systems, automation, fostering a security-conscious culture, and making a tangible difference in protecting sensitive health information, this role is for you
- As our Senior Application Security Engineer, you will be the driving force behind securing Virta's applications and platform, directly contributing to the trust our members and partners place in us
- You'll collaborate across teams to ensure security is a seamless part of our development lifecycle
- Own and Enhance Security Design: Assess our current security controls within GCP and Kubernetes, identify areas for improvement, and drive the maturation of our security posture from good to great
- Champion Secure Development: Partner closely with Engineering, Product, and Platform teams to integrate security best practices early and often ("shift-left") into the software development lifecycle
- Build and Automate: Design, implement, and manage security tooling and automation to streamline vulnerability detection, remediation, and compliance verification. Replace manual processes with efficient, automated solutions
- Refine Access Control: Evolve our identity and access management (IAM) strategy, ensuring least-privilege access and robust auditing capabilities across our systems
- Strengthen Network Security: Continuously improve our network security architecture, policies, and controls within our cloud environment
- Develop Clear Standards: Establish, document, and communicate practical security policies, standards, and guidelines for engineering teams
- Lead Security Initiatives: Drive vulnerability management efforts and enhance our incident response preparedness, ensuring we are ready to handle potential threats effectively
- Cultivate Security Awareness: Act as a security evangelist, promoting security awareness and best practices throughout the engineering organization
- Your First 90 Days
- Joining a new company and stepping into a foundational role takes time. Here’s what you can expect as you get started and begin making your mark:
- Immerse Yourself: Your initial focus will be on understanding Virta's culture, our mission, our engineering workflows, and the nuances of our cloud platform (GCP/Kubernetes). You'll connect with key engineers and stakeholders across different teams
- Learn the Landscape: You'll dive into our existing systems, CI/CD pipelines, and current security tooling and configurations to get a clear picture of where we stand today
- Assess & Identify Opportunities: Leveraging your expertise, you'll begin evaluating our current security posture, including critical areas like our IAM implementation (RBAC), data security practices, network controls, and existing security policies. You'll identify the highest-impact areas for initial improvement
- Prioritize & Plan: Collaborating with engineering leadership and relevant teams, you'll help shape the initial priorities for application security, translating your assessments into a tangible action plan or roadmap
- Start Building: You won't just be planning! You'll quickly transition to hands-on work, likely starting with foundational projects such as refining IAM roles, enhancing specific security configurations, or beginning to develop key security automation or documentation
Our take
Much of the care for type 2 diabetes has been based on control and prevention, rather than a direct reversal of the issue. Virta Health is changing that, providing patients with personalized treatment plans, virtual monitoring and patient care.
Instead of depending upon medication, which often needs to be increased over time, the company is tackling the problem at its root and taking a fundamentally different approach that is better for the patient, and more economical for insurers. Among enrolled patients in its clinical trial at one year, 60% achieved diabetes reversal.
While platforms like Vida Health also serve similar markets, the large number of prediabetic (88M) and diabetic (30M) Americans presents a significant opportunity for growth. Along with its significant funding round in 2021 fueling its efforts to expand the reach of its telehealth-powered diabetes reversal treatment. Positioning the company for widespread adoption and continued success in addressing this critical healthcare challenge.
Steph
Company Specialist at Welcome to the Jungle
Insights
4% employee growth in 12 months
Company
Funding (last 2 of 5 rounds)
Apr 2021
$133m
SERIES E
Dec 2020
$65m
SERIES D
Total funding: $373m
Company benefits
- Remote-first work environment with ability to work from home
- Flexible work hours & time off policy
- Virta pays 99% of all employee health insurance premiums, and 75% for all dependents
- Up to 16 weeks paid parental leave
- Enroll in the Virta treatment for free and give a discount to friends and family
- Internet, home office, learning & development stipends
- Employee Resource Groups like Parents of Virta, Ladies of Virta, and Virtans for DEI
- 401K and ROTH contribution opportunities
Company HQ
Civic Center, Denver, CO
Leadership
Sami Inkinen
(Co-Founder & CEO)Worked on Microsoft’s strategy team for MS Office, and as a consultant for McKinsey & Company within the software, telecommunications, and government sectors. Co-founder of online real estate marketplace Trulia, serving as its COO until its IPO and eventual sale to Zillow Group.
Share this job
View 7 more jobs at Virta Health