Remote Staff Security Engineer — Secure-by-Default Builder

Pomelo Care; New York (NY); On-site; USD 190,000 - 260,000; Full time

Benefits offered by this job

Health, Dental, and Vision coverage

HSA options

FSA

Equity grant

401(k) program

16 weeks paid parental leave

Fully remote within the US

Job summary

Pomelo Care is seeking an experienced security-focused software engineer to lead the controls, automation, and code that reduce risk across our virtual healthcare platform. You will work within a fast-moving startup, reporting to the VP of Engineering, with latitude to decide what matters and ship it.

You will build secure-by-default libraries and guardrails, partner with compliance, and protect patient data while enabling dozens of engineers to move fast.

Qualifications

• 5+ years of software engineering with production-grade code.
• Experience in security-focused roles and risk reduction.
• Ability to translate threats into concrete controls.

Responsibilities

• Own security problems end to end and ship independently.
• Identify real risks and implement direct controls.
• Build secure-by-default libraries, guardrails, and tooling.
• Define least-privilege guardrails across services to protect data.
• Harden developer machines to reduce supply chain and AI risks.
• Collaborate with compliance to map controls to regulatory requirements.

Skills

Security depth

Threat modeling

Identity and auth flows

OWASP Top 10

Cloud security

Tools

Kotlin

Java

Python

Go

C#

Google Cloud Platform

Job description

Pomelo Care is seeking an experienced security-focused software engineer to lead the controls, automation, and code that reduce risk across our virtual healthcare platform. You will work within a fast-moving startup, reporting to the VP of Engineering, with latitude to decide what matters and ship it.

You will build secure-by-default libraries and guardrails, partner with compliance, and protect patient data while enabling dozens of engineers to move fast.