Senior Product Security Engineer (Application Security & Cloud Security)

What You’ll Be Working On

The engineering organization builds cloud-native software that processes sensitive healthcare information and powers mission-critical operational workflows for providers across the country.

As a Senior Product Security Engineer, you’ll help secure every stage of how software gets built and deployed, including:

Customer-facing web applications, APIs, and backend services
Cloud-native infrastructure supporting production healthcare workloads
Identity, authentication, authorization, and secrets management across distributed systems
CI/CD pipelines, infrastructure-as-code, container platforms, and developer tooling
Threat modeling for new platform capabilities and architectural initiatives
Security automation that enables engineering teams to ship software quickly without sacrificing security

About The Role

We are hiring a Senior Product Security Engineer to help design, build, and mature the security foundations of a rapidly growing healthcare technology platform.

This is a deeply hands-on engineering role for someone who enjoys partnering directly with software engineers to solve security challenges before they become production problems.

Rather than acting as a traditional security gatekeeper, you will embed with engineering teams, influence architectural decisions, improve developer workflows, and build scalable security capabilities that allow engineering teams to move quickly while maintaining a high level of trust.

The ideal candidate brings strong expertise in either Application Security or Cloud Security, with the ability and interest to operate comfortably across both domains.

What You Will Do

Influence the security architecture of new products, services, APIs, cloud infrastructure, and platform capabilities from initial design through production deployment
Lead threat modeling sessions and security architecture reviews for customer-facing systems and engineering initiatives
Partner directly with software engineers to design secure, scalable solutions without slowing product development
Review application code, APIs, cloud infrastructure, and system designs to identify meaningful security risks and practical remediation strategies
Design and improve secure authentication, authorization, identity management, API security, and secrets management practices
Improve security automation across CI/CD pipelines, infrastructure-as-code, container platforms, cloud environments, and developer tooling
Build reusable security frameworks, paved roads, and engineering standards that make secure software development easier by default
Identify, prioritize, and drive remediation of security risks across applications, infrastructure, and production environments
Partner with Engineering, Platform, Infrastructure, Product, and Leadership teams to continuously improve Product Security maturity
Balance engineering velocity, customer needs, and long-term platform security when making technical decisions
Leverage modern AI-assisted development tools such as Claude, GitHub Copilot, Cursor, and similar technologies to improve productivity and accelerate engineering workflows

What You Will Be Working On

6+ years of experience in Product Security, Application Security, Security Engineering, Cloud Security, or a closely related role
Strong experience securing modern cloud-native SaaS applications operating in production environments
Deep understanding of secure software development practices and modern application security principles
Experience reviewing application architecture, APIs, distributed systems, and cloud-native platforms
Strong knowledge of authentication, authorization, identity management, cryptography, secrets management, and secure API design
Experience securing AWS, GCP, Kubernetes, containers, infrastructure-as-code, and modern cloud environments
Experience with secure SDLC, threat modeling, vulnerability management, and developer security tooling
Comfortable reading production code and collaborating directly with engineering teams to improve software security
Strong communication skills with the ability to explain security risks, architectural decisions, and engineering tradeoffs clearly
Startup, scale-up, or high-growth technology company experience preferred

Senior Level Expectations

You have partnered directly with software engineering organizations to build secure products from design through production
You have influenced architectural decisions that improved security without slowing engineering velocity
You think beyond finding vulnerabilities and focus on building secure systems that scale
You have created reusable security frameworks, automation, and engineering patterns that improve how software gets built
You are comfortable operating in ambiguous environments where strong technical judgment is required
You balance developer experience, product delivery, and long-term platform security when making engineering decisions
You remain deeply hands-on while influencing security strategy across multiple engineering teams

Modern Development Approach

Experience using AI-assisted development tools such as Claude, GitHub Copilot, Cursor, or similar technologies
Strong engineering mindset with the ability to automate repetitive security work wherever possible
Builder mentality with an emphasis on enabling engineering teams rather than blocking them
Comfortable collaborating across Engineering, Platform, Infrastructure, Product, Compliance, and Leadership teams
Pragmatic approach to balancing security, engineering velocity, maintainability, and business priorities
Strong product thinking with the ability to connect security decisions to customer trust and business outcomes

Nice to Have

Experience building or securing customer-facing SaaS platforms
Healthcare technology experience
Experience working in regulated industries such as healthcare, fintech, or enterprise SaaS
Experience securing APIs, distributed systems, microservices, and event-driven architectures
Kubernetes, Docker, and cloud-native security expertise
Infrastructure-as-code security experience (Terraform, CloudFormation, Pulumi, or similar)
Experience implementing developer security tooling and automated security testing
Experience with GCP or multi-cloud environments
Experience incorporating AI-assisted development into secure software engineering workflows