Security Engineer: Build Secure Healthcare Infra & Tools

Medplum; San Francisco, Northern (CA, KY); Hybrid; USD 150,000 - 210,000; Full time

Benefits offered by this job

Equity

Flexible time off

Job summary

Medplum is redefining healthcare with our open source, API-first EHR platform, trusted by leading digital health and life sciences companies.

As a Security Engineer, you will own vulnerability remediation, build security automation, and work across TypeScript apps and AWS to strengthen security architecture.

Join a fast-moving startup and collaborate with engineers and leadership to improve security posture across the platform and supporting compliance programs.

Qualifications

• 3+ years of experience in security engineering, software engineering, infrastructure engineering, or a related technical role.
• Based in the SF Bay Area and available for twice-weekly in-person collaboration.
• Experience in application security, cloud security, infrastructure security, security engineering, or backend software engineering.
• Familiar with authentication, authorization, injection, SSRF, XSS, CSRF, secrets management, and dependency vulnerabilities.
• Experience with Linux, networking, SQL databases, and cloud infrastructure.
• You enjoy automating repetitive work and documenting findings clearly for engineers.

Responsibilities

• Find and fix security issues across the Medplum stack and remediate with engineers.
• Build security automation to reduce manual security work.
• Investigate security events and participate in incident response and forensics.
• Improve application and cloud security across TypeScript apps and AWS infrastructure.
• Support security and compliance programs (SOC 2, HIPAA, HITRUST).
• Help customers understand Medplum security and contribute to security docs.

Skills

Security engineering

Application security

Cloud security

Infrastructure security

Backend engineering

Debug production code

Linux

Networking

SQL databases

Automation

Technical writing

Ownership

Startup environment

Tools

AWS

Kubernetes

PostgreSQL

Redis

Job description

Medplum is redefining healthcare with our open source, API-first EHR platform, trusted by leading digital health and life sciences companies.

As a Security Engineer, you will own vulnerability remediation, build security automation, and work across TypeScript apps and AWS to strengthen security architecture.

Join a fast-moving startup and collaborate with engineers and leadership to improve security posture across the platform and supporting compliance programs.