Security Engineer

Jobtailor; San Francisco (CA); On-site; USD 140,000 - 210,000; Full time

Job summary

Jobtailor seeks a Security Architect to lead the security architecture, implementation, and maintenance of our cloud-based data platform, applications and medical devices. You will establish security review processes for all new products and features, and guide security features through the full product lifecycle.

You will prototype security requirements and educate the broader engineering team on secure coding practices, and work cross-functionally with internal software, hardware, quality, and

Qualifications

• Security architecture across cloud, API layers, and client apps.
• Experience designing security controls for local device connections.
• Strong knowledge of HTTPS/TLS and cryptography algorithms.

Responsibilities

• Lead security architecture, implementation, and maintenance of our cloud-based data platform, applications and medical devices.
• Establish security review processes for all new products and features.
• Guide security features through the complete product lifecycle.
• Prototype security requirements and educate the broader engineering team on secure coding best practices.
• Work cross-functionally with internal software, hardware, quality, and regulatory teams.

Skills

Secure architecture

Device security

Cryptography & transport security

Threat modeling

Programming

Job description

Responsibilities

• Lead security architecture, implementation, and maintenance of our cloud-based data platform, applications and medical devices.
• Establish security review processes for all new products and features.
• Guide security features through the complete product lifecycle.
• Prototype security requirements and educate the broader engineering team on secure coding best practices.
• Work cross-functionally with internal software, hardware, quality, and regulatory teams.

Requirements

• Strong foundations in secure architecture across cloud environments (AWS, Azure, GCP), API layers, and client-side applications (mobile/desktop).
• Proven experience designing security controls for local device connections (BLE, Wi‑Fi, USB).
• Deep understanding of secure transport protocols (HTTPS/TLS) and data cryptography algorithms (e.g., ECDH, ECDSA, AES‑GCM).
• Hands‑on experience executing threat modeling (STRIDE, Attack Trees).
• Proficient in programming (e.g., Python, Bash, or PowerShell).

Core Competencies

Demonstrates expertise in leading security architecture and implementation for cloud‑based platforms, with a strong focus on secure coding practices and cross‑functional collaboration. Proficient in designing security controls and executing threat modeling to ensure robust data protection.