Product Security Engineer (Medtech)

TL;DR

Product Security Engineer (Cybersecurity): Building and extending security services and tools to enable platform engineers to deploy hirify.global's healthcare financial platform safely. Focus on security automation, threat modeling, and implementing secure architectural paths for developers.

Location: Must be based in the USA (Remote or Hybrid flexibility)

Salary: $157,250 - $198,875

Company

hirify.global is a leading healthcare financial platform leveraging data science and smart design to make the U.S. healthcare system more affordable and accessible.

What you will do

• Create and extend security tools and services to help product and platform engineers build and maintain products safely.
• Serve as a Security Partner for engineering teams across the SSDLC, helping with threat modeling and security design.
• Perform security code reviews and architecture reviews for various features.
• Contribute to security automation projects, including static analysis and vulnerability management.
• Develop secure, supportable paths and libraries for other engineers to follow.

Requirements

• Proficiency in Python, Go, or Kotlin.
• Experience with security code review, threat modeling, or security architecture reviews.
• Familiarity with HIPAA, PCI, and the security considerations for health and payment data.
• Must be based in the USA.

Nice to have

• Experience creating developer-focused security tooling or libraries.
• Active participation in security capture-the-flag (CTF) events.

Culture & Benefits

• Unlimited PTO for vacation, sick, and mental health days (minimum 20 days encouraged).
• 16 weeks of paid parental leave with comprehensive health benefits.
• 401k plan with 100% employer match up to 3% of annual compensation.
• Stipend for learning and development resources and access to professional coaching.
• Inclusive environment with several employee resource groups (BIPOC, LGBTQIA+, Women+).