Security Engineer

blueberrypediatrics.com; United States; Remoto; USD 110.000 - 140.000; Tempo integral

Benefícios oferecidos por esta vaga

Equity

Resumo da vaga

Blueberry is hiring a Security Engineer to run day-to-day security operations in the United States. You will identify and fix vulnerabilities across GCP and Python/Django applications, and manage controls that protect devices, networks, and accounts.

A path into application security is available. You'll own vulnerability management, remediation, detection and incident readiness, endpoint security, network security, access management, and IT administration.

Qualificações

• 2+ years in security, cloud, or DevOps.
• Proficiency in Python and production codebases.
• Strong Linux fundamentals with production systems.
• Experience with Google Cloud Platform or similar cloud.
• Hands-on with vulnerability scanning, EDR, MDM, logging and monitoring.
• Healthcare or regulated-industry experience is a plus.
• Experience with Django or web app development is a plus.

Responsabilidades

• Identify and remediate vulnerabilities across GCP and Python/Django apps.
• Manage tools and controls protecting devices, network, and accounts.
• Maintain security logging, monitoring, and incident readiness.
• Run vulnerability management and risk prioritization.
• Oversee endpoint security, network/firewall rules, and access reviews.
• Support IT administration and onboarding of new hires.

Conhecimentos

Security experience

Cloud platforms

Python

Linux fundamentals

GCP experience

Vulnerability management

EDR/MDM

Descrição da vaga

Blueberry's Mission:

Our mission is to turn every family’s living room into their own personal pediatric urgent care. We combine home exam kits, concierge-like access, and AI-enabled Pediatricians to provide affordable and near-instant clinic-level care, 24/7. We believe every child deserves access to top-quality healthcare.

We’ve proven that by drastically improving access and turning healthcare into a consumer-grade experience, we drive better health outcomes for children and families while dramatically reducing medical costs for parents and health plans (up to 50% reduction in ED costs).

We are a mission and values driven company. You can learn more about our values HERE https://drive.google.com/file/d/1WbORoU9L17875Re3r0psjPcALDGUvDMa/view.

Note: Beware of Scammers. Blueberry will NEVER ask you to download software/apps or request sensitive personal information like bank accounts or social security numbers. If you received an email requesting this information it is likely a scam. We are only accepting candidates through our job board.

THE OPPORTUNITY:

We're hiring a Security Engineer to run Blueberry's day-to-day security operations. Reporting to the Head of Security, you'll find and fix vulnerabilities across our Google Cloud Platform environment and Python/Django applications, and manage the tools and controls that protect our devices, network, and accounts. Work in our codebase also offers a path into application security.

WHAT YOU'LL OWN:

• Vulnerability management. Scan and monitor our GCP environment, self-hosted services, and dependencies, prioritize by risk, and track each issue to resolution.
• Remediation. Resolve vulnerabilities directly wherever you can, and partner with engineering on larger fixes.
• Detection and incident readiness. Maintain security logging, monitoring, and alerting, support incident investigations, and regularly test backups and recovery.
• Endpoint security. Deploy and manage EDR and MDM across company devices.
• Network security. Manage firewall and egress rules and network segmentation.
• Access management. Run access reviews, offboarding, and credential rotations.
• IT administration. Set up accounts and devices for new hires, administer our SaaS tools, and support teammates with device and account issues.

WHAT SUCCESS LOOKS LIKE:

Performance is data-driven and tied to the metrics you own, expected to center on:

• Time to remediate vulnerabilities, by severity
• Size and age of the open vulnerability backlog
• EDR and MDM coverage across devices
• On-time access reviews and offboarding

EXPERIENCE YOU'LL NEED

• 2+ years in security, cloud, systems administration, DevOps, or software engineering.
• Proficiency in Python and experience working in a production codebase.
• Strong Linux fundamentals, including patching and maintaining production systems.
• Experience with Google Cloud Platform or another major cloud provider.
• Hands‑on experience with several of the following: vulnerability scanning, EDR, MDM, logging and monitoring, network security, and identity and access management. We'll support you in learning the rest.
• Experience with Django or web application development is a plus.
• Experience remediating vulnerabilities is a plus.
• Experience in healthcare or another regulated industry is a plus.

Expected compensation for this role: Base salary between $110,000 - $140,000 depending on location and experience. The role will also include equity.

Location: This role requires you to live and work in the United States. Because Blueberry is a medical practice, we are unable to support work from outside the US, including working while traveling internationally.

We are an equal opportunity employer and value diversity at our company. We do not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status.