Staff Security Engineer, Evidation Health

• This role is ideal for someone with strong experience in SaaS Platform security who is looking to take their security career to the next level with strong ownership of a complex set of cloud environments and exposure to a broad range of security technologies and domains
• 12+ years of application security and cloud security experience
• Strong security fundamentals, including threat modeling, penetration testing and secure design principles
• Fluency in at least one programming language (Ruby, Python, Bash, etc)
• Familiarity with scalable systems and cloud-native architectures, including Kubernetes, Redis and postgres databases
• Experience maintaining the secure operations of complex cloud environments
• Strong communication skills, especially among audiences with differing technical backgrounds
• Strong network security background and understanding of networking principles

Desirable

• The Security Team is responsible for all aspects of security at Evidation
• This encompasses a wide range of responsibilities aimed at protecting Evidation’s software, data and infrastructure while ensuring the trust and safety of our customers
• This includes partnering with multiple engineering teams including software engineering, data engineers, DevOps and IT
• In this role, you will focus on the security of our software, systems and cloud infrastructure, including securing our architecture, implementing mitigations, threat detection and monitoring, writing security policies and participating in defining the long-term strategy for our platform security
• Proactively identify and mitigate security vulnerabilities and threats in the application and cloud environments
• Respond to and investigate security incidents and breaches
• Ensure compliance with relevant security standards and regulations
• Conduct regular security audits and risk assessments
• Develop and maintain secure coding guidelines and train development teams accordingly
• Write and maintain security policies and procedures and ensure our teams are following them