Security Engineer (Senior)

What We Do We’re fixing one of the most broken and costly pieces of the US healthcare system: medical billing. Healthcare providers spend over $250B each year on administrative overhead just to get paid by insurance. Medical billing is expensive because it’s nuanced and hard—maybe ~100x harder than credit card payment processing—and because it’s traditionally done by armies of humans who track and manage complex rules and processes specific to individual insurance companies with little or no supporting software. We’re rethinking medical billing from the ground up, building software backed by best‑in‑class data science (and, soon, a dash of machine learning) to automate much of this complexity so healthcare providers can get paid dramatically more easily and inexpensively. The Role We’re looking for a Senior Security Engineer who is ready to elevate the safety and security of our systems and networks. You will serve as our guardian, ensuring our platforms are resilient against all threats while meeting compliance requirements. We value a hands‑on approach and seek someone who is conversant with the nitty‑gritty of security frameworks, while being deeply engaged in strategic and operational security endeavors. What You’ll Do Build security guardrails: build security protections into our systems to ensure a secure‑by‑default posture. Collaborate with engineering teams: participate in design reviews and threat modeling sessions to identify potential security flaws early in development, and validate the security of new features and services during rollout. Implement & navigate compliance rituals: understand, oversee, and drive the rituals associated with HIPAA, SOC2, SOC1, PCI and HITRUST to remain compliant and informed. Vulnerability management: regularly audit our platforms and tech stack for vulnerabilities, ensuring they are identified and addressed in a timely manner. Manage third‑party relationships: coordinate with vendors for penetration testing and other security services, ensuring our platforms undergo regular scrutiny, and review vendor security prior to integration. Who You Are 6+ years of experience in the security domain, with a proven track record of hands‑on involvement in complex projects. Expertise in practical, real‑world security compliance. Strong knowledge of HIPAA and experience handling sensitive information. Adaptable and flexible, ready to engage with security challenges at both enterprise and client levels. Skilled at writing code to automate security, and able to read, understand, and audit systems, networks and IT setups to ensure airtight security. Pay Transparency The estimated starting annual salary range for this position is $180,000 - 258,000 USD. The listed range is a guideline from Pave data, and the actual base salary may be modified based on factors including job‑related skills, experience/qualifications, interview performance, market data, etc. Total compensation may also include equity, sales incentives (for sales roles), and employee benefits. Given Candid Health’s funding and size, we heavily value the potential upside from equity in our compensation package. #J-18808-Ljbffr Candid Health