Security Engineer

Blueberry Pediatrics; United States; Remote; USD 110,000 - 140,000; Full time

Benefits offered by this job

Equity

Job summary

Blueberry Medical PA in the United States is hiring a Security Engineer to run day-to-day security operations across GCP and Python/Django applications. You will identify and fix vulnerabilities, manage security tooling, and protect devices, network, and accounts.

Reporting to the Head of Security, you will lead remediation, detection, incident readiness, access management, and IT administration, with opportunities to grow into application security.

Qualifications

• 2+ years in security, cloud, systems administration, DevOps, or software engineering.
• Proficiency in Python and experience working in a production codebase.
• Strong Linux fundamentals, including patching and maintaining production systems.
• Experience with Google Cloud Platform or another major cloud provider.
• Hands-on experience with vulnerability scanning, EDR, MDM, logging and monitoring, network security, and identity and access management. We'll support you in learning the rest.
• Experience with Django or web application development is a plus.
• Experience remediating vulnerabilities is a plus.
• Experience in healthcare or another regulated industry is a plus.

Responsibilities

• Vulnerability management. Scan and monitor our GCP environment, self-hosted services, and dependencies, prioritize by risk, and track each issue to resolution.
• Remediation. Resolve vulnerabilities directly wherever you can, and partner with engineering on larger fixes.
• Detection and incident readiness. Maintain security logging, monitoring, and alerting, support incident investigations, and regularly test backups and recovery.
• Endpoint security. Deploy and manage EDR and MDM across company devices.
• Network security. Manage firewall and egress rules and network segmentation.
• Access management. Run access reviews, offboarding, and credential rotations.
• IT administration. Set up accounts and devices for new hires, administer our SaaS tools, and support teammates with device and account issues.

Skills

Python

Linux fundamentals

GCP experience

Vulnerability scanning

EDR

MDM

Logging & monitoring

Identity & access management

Django experience

Healthcare/regulatory experience

Tools

Google Cloud Platform (GCP)

EDR tools

MDM solutions

Job description

Blueberry's Mission:

Our mission is to turn every family’s living room into their own personal pediatric urgent care. We combine home exam kits, concierge-like access, and AI-enabled Pediatricians to provide affordable and near-instant clinic-level care, 24/7. We believe every child deserves access to top-quality healthcare.

We’ve proven that by drastically improving access and turning healthcare into a consumer-grade experience, we drive better health outcomes for children and families while dramatically reducing medical costs for parents and health plans (up to 50% reduction in ED costs).

We are a mission and values driven company. You can learn more about our values HERE.

The Opportunity:

We're hiring a Security Engineer to run Blueberry's day-to-day security operations. Reporting to the Head of Security, you'll find and fix vulnerabilities across our Google Cloud Platform environment and Python/Django applications, and manage the tools and controls that protect our devices, network, and accounts. Work in our codebase also offers a path into application security.

What you'll own:

• Vulnerability management. Scan and monitor our GCP environment, self-hosted services, and dependencies, prioritize by risk, and track each issue to resolution.




• Remediation. Resolve vulnerabilities directly wherever you can, and partner with engineering on larger fixes.




• Detection and incident readiness. Maintain security logging, monitoring, and alerting, support incident investigations, and regularly test backups and recovery.




• Endpoint security. Deploy and manage EDR and MDM across company devices.




• Network security. Manage firewall and egress rules and network segmentation.




• Access management. Run access reviews, offboarding, and credential rotations.




• IT administration. Set up accounts and devices for new hires, administer our SaaS tools, and support teammates with device and account issues.

What Success Looks Like:

Performance is data-driven and tied to the metrics you own, expected to center on:

• Time to remediate vulnerabilities, by severity




• Size and age of the open vulnerability backlog




• EDR and MDM coverage across devices




• On-time access reviews and offboarding

Experience You'll Need

• 2+ years in security, cloud, systems administration, DevOps, or software engineering.




• Proficiency in Python and experience working in a production codebase.




• Strong Linux fundamentals, including patching and maintaining production systems.




• Experience with Google Cloud Platform or another major cloud provider.




• Hands-on experience with several of the following: vulnerability scanning, EDR, MDM, logging and monitoring, network security, and identity and access management. We'll support you in learning the rest.




• Experience with Django or web application development is a plus.




• Experience remediating vulnerabilities is a plus.




• Experience in healthcare or another regulated industry is a plus.

Expected compensation for this role: Base salary between $110,000 - $140,000 depending on location and experience. The role will also include equity.

Location: This role requires you to live and work in the United States. Because Blueberry is a medical practice, we are unable to support work from outside the US, including working while traveling internationally.

We are an equal opportunity employer and value diversity at our company. We do not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status.