Senior Security Engineer

We’re hiring a Security Engineer to shape and scale the security strategy at an established healthcare startup. This role is deeply technical, with 40–50% of your time spent writing secure code and automating workflows in TypeScript. You’ll work cross-functionally to embed security across our infrastructure (largely AWS) and development lifecycle—from designing secure systems to integrating tooling into our CI/CD pipelines. This role embodies the notion of if you find a problem, be apart of the solution.

Logistics: 100% remote in the US.

Compensation: $200-270k base + equity options; there is some flexibility around base for stellar candidates.

Must be authorized to work in the United States.

What You’ll Be Doing:

• Write production-grade code (TypeScript) to automate security tooling, processes, and detections (we're agnostic on the language you're experienced in but someone in this role will need to learn TypeScript
• Lead the integration of security tools (SAST, SCA, secrets scanning) into CI/CD pipelines (GitHub Actions, Jenkins, CircleCI, TravisCI, Earthly)

Interested in remote work opportunities in Cyber Security? Discover Cyber Security Remote Jobs featuring exclusive positions from top companies that offer flexible work arrangements.

• Secure our AWS cloud infrastructure using tools like SCP, IAM, GuardDuty, Security Hub
• Drive secure architecture for systems including auth, service-to-service communication, and RBAC
• Oversee and continuously improve the vulnerability management program across engineering
• Use observability tools (e.g., SIEM, Scout Suite, Prowler, Cloud Custodian) to proactively surface issues
• Apply risk frameworks (OWASP Top 10, CIS AWS Benchmark, CVSS v3) to assess and prioritize threats
• Mentor engineers and influence security best practices org-wide

What's Required of You:

• 5+ years in engineering roles focused on security engineering
• Strong, current software development skills—with a focus on TypeScript or Python

Browse our curated collection of remote jobs across all categories and industries, featuring positions from top companies worldwide.

• Experience automating security solutions, not just configuring them
• Deep knowledge of security concepts (threats, vulnerabilities, exploits, TLS, auth, etc.)
• Hands-on experience with AWS security tools and infrastructure as code (Terraform)
• Familiarity with CVSS v3, OWASP Top 10, and common vulnerability management practices
• Proven ability to lead through influence and technical guidance

Bonus Points:

• Experience in fast-paced startup environments
• Background working with distributed teams
• Interest in leadership or management roles in the future