Security Engineer

Yumi Health, Inc.; Santa Clara, Northern (CA, KY); Hybrid; USD 160,000 - 300,000; Full time

Benefits offered by this job

Health insurance

401(k)

Visa and green-card sponsorship

Job summary

Yumi Health, Inc. seeks a security leader to guide trust-by-design across application security, access control, infrastructure hardening, auditability, and incident response. You will review architectures and enforce least-privilege practices across production systems.

The role offers a high base salary, an 8–20% annual performance bonus, meaningful equity, and comprehensive benefits including health insurance, 401(k), and visa/green-card sponsorship.

Qualifications

• Strong experience in application security, infrastructure security, or both.
• Deep understanding of authentication, authorization, session management, secrets handling, and secure system design.
• Able to review code and architecture for real-world risk, not just checklist compliance.
• Familiarity with logging, auditing, incident response, and production hardening.

Responsibilities

• Help make Yumi trustworthy by design across application security, access control, infrastructure hardening, auditability, incident response, and practical security review.

Skills

Application security

Infrastructure security

Code review

Logging & auditing

Incident response

Job description

Yumi Health builds clinical software for skilled nursing teams. The product brings resident records, clinical and administrative workflows, and AI-assisted tools into one workspace.

Role Description

Help make Yumi trustworthy by design across application security, access control, infrastructure hardening, auditability, incident response, and practical security review.

Compensation

• Base salary: $160,000 - $300,000 depending on experience and level.
• Annual performance bonus: 8% - 20% of base.
• Equity: meaningful equity grant on a standard vesting schedule.
• Benefits: health insurance, 401(k), visa and green-card sponsorship.

Qualifications

• Strong experience in application security, infrastructure security, or both.
• Deep understanding of authentication, authorization, session management, secrets handling, and secure system design.
• Able to review code and architecture for real-world risk, not just checklist compliance.
• Familiarity with logging, auditing, incident response, and production hardening.

Preferred

• Experience securing healthcare or other compliance-sensitive systems.
• Familiarity with HIPAA, audit controls, or least-privilege access patterns.
• Experience with cloud security and IAM design.