Senior Security Engineer - Remote Secure Healthcare Platform

Pomelo Care; United States; Remote; USD 190,000 - 260,000; Full time

Benefits offered by this job

Health, dental, and vision coverage

HSA options

FSA

Equity grant

401(k)

Paid parental leave

Fully remote within US

Job summary

Pomelo Care, a leading virtual medical practice for women and children, seeks an experienced security engineer to own execution of controls, guardrails, and tooling. You will reduce risk across services, protect patient data, and partner with compliance on HITRUST and health plan requirements.

The role reports to the VP of Engineering and is fully remote within the continental US, with a focus on building secure-by-default platforms for dozens of engineers to move fast while staying safe.

Qualifications

• 5+ years of software engineering with production-grade code.
• Security depth including threat modeling and cloud/supply-chain security.
• Experience with identity and authorization flows and OWASP Top 10.

Responsibilities

• Own security problems end to end and ship independent controls.
• Identify real risks and implement direct, effective controls.
• Build secure libraries, guardrails, and tooling for engineers.
• Define least-privilege guardrails across services to protect patient data.
• Harden developer machines against supply-chain and emerging threats.
• Collaborate with compliance to translate controls into enforceable requirements.

Skills

Security engineering

Threat modeling

Identity & auth flows

OWASP Top 10

Cloud security

Supply-chain security

Kotlin/Java/Python/Go/C# experience

Secure-by-default tooling

Tools

Google Cloud Platform

Job description

Pomelo Care, a leading virtual medical practice for women and children, seeks an experienced security engineer to own execution of controls, guardrails, and tooling. You will reduce risk across services, protect patient data, and partner with compliance on HITRUST and health plan requirements.

The role reports to the VP of Engineering and is fully remote within the continental US, with a focus on building secure-by-default platforms for dozens of engineers to move fast while staying safe.