Product Security Engineer

TL;DR

Product Security Engineer: Analyze vulnerabilities in web and mobile applications, integrate security into SDLC, and deploy security tooling with an accent on health tech threats and compliance. Focus on threat modeling, secure code reviews, penetration testing, and cloud security assessments.

Location: Remote - US (not eligible in Hawaii; US-based team members outside Pacific time zone must work at least six hours between 8 am and 5 pm PT)

Salary: $101,405 - $140,400 USD (zone-dependent)

Company

Mental health benefits platform providing one-on-one, group, and digital resources for employee well-being.

What you will do

• Analyze security vulnerabilities in web/mobile apps, assess risks, and drive remediations with engineering teams.
• Research product threats, emerging vulnerabilities, and mitigation techniques in health tech.
• Integrate security into SDLC, conduct threat modeling, secure code reviews, and penetration tests.
• Deploy and manage security tools like SAST, DAST, Hashicorp Vault; audit app and cloud configurations.
• Collaborate with DevOps on cloud security, infrastructure controls, and IT security initiatives.

Requirements

• 2-4 years in product/application security or 1-3 years in security-focused software engineering
• Hands-on with vulnerability management, secure code review, threat modeling, secure development practices.
• Experience with scripting (Python/Bash preferred); integrating security into agile delivery.
• Stack: AWS (ECS), Gitlab CI/CD, Python (Django/Flask), PostgreSQL/Redis, Terraform, Datadog/Sentry.
• Excellent communication; thrive in fast-paced, collaborative environments.
• Must be based in US (excluding Hawaii)

Nice to have

• High-growth startup, SaaS, or Health Tech experience.
• Software engineering background.

Culture & Benefits

• "It Takes a Village" culture: high empathy, accountability, bias to action, transparent feedback.
• Medical/Dental/Vision/Disability/Life Insurance, HSA/FSA, access to platform coaches/therapists.
• Flexible Time Off, Collective Pause Days, Parental Leave, Family Benefits.
• Professional Development Stipend, 401k, Financial Planning, Wellness/Cell Phone Stipends.
• Fully remote workforce with overlapping PT hours; New Hire WFH Stipend, community events.