Product Security Engineer — Remote

Modern Health; United States; Remote; USD 101,000 - 140,000; Full time

Benefits offered by this job

Medical/Dental/Vision

Disability Insurance

Life Insurance

HSA option

FSA

Coaches & Therapists

Flexible Time Off

Collective Pause Days

Parental Leave

Family Forming Benefit

Family Assistance Benefit

Professional Development Stipend

401k

Financial Planning Benefit

Wellness stipend

New Hire stipend

ModSquad events

Cell phone reimbursement

Job summary

Modern Health is seeking a Security Engineer to join the Product Security team. You will drive vulnerability remediation, threat modeling, and secure development across web and mobile platforms, working closely with engineering and product teams to raise the security posture of our health tech services.

The role emphasizes hands-on security tooling, AWS cloud security, and collaboration with DevOps and infrastructure to secure deployments while promoting a proactive security culture.

Qualifications

• 2-4 years of experience in product/application security or 1-3 years in security-focused software engineering.
• Hands-on experience with vulnerability management, secure code review, threat modeling, and industry-standard tools for application/security.

Responsibilities

• Analyze security vulnerabilities in web and mobile applications, determine risk levels, and drive remediations with engineering teams.
• Research and report on product threats, vulnerabilities, and mitigation techniques.
• Partner with Engineering and Product to integrate security at every SDLC stage and promote secure development practices.
• Develop and advocate cost-effective solutions for security challenges.
• Implement adoption of product security standards across the organization.
• Routinely test, audit, and assess security posture of application and cloud configurations.
• Guide engineering in secure coding standards and provide actionable feedback.
• Deploy, optimize, and manage security tooling (SAST, DAST, Vault, etc.).
• Participate in threat modeling for new features and services.
• Conduct secure code reviews on services built with modern frameworks.
• Assist in planning targeted penetration tests before production release.
• Collaborate on IT security initiatives with infra/ops teams.
• Engage with Cloud Security efforts with DevOps to improve cloud architecture and controls.

Skills

Security engineering

Threat modeling

Vulnerability management

Secure code review

Secure SDLC

AWS cloud posture

CI/CD security

Python

Scripting (Python/Bash)

Tools

AWS

Gitlab CI/CD

Python (Django/Flask/aiohttp)

PostgreSQL

Redis

Datadog

Sentry

Terraform

Packer

Job description

Modern Health is seeking a Security Engineer to join the Product Security team. You will drive vulnerability remediation, threat modeling, and secure development across web and mobile platforms, working closely with engineering and product teams to raise the security posture of our health tech services.

The role emphasizes hands-on security tooling, AWS cloud security, and collaboration with DevOps and infrastructure to secure deployments while promoting a proactive security culture.