Senior Security Software Engineer

Role Description

House Rx is hiring a Senior Security Software Engineer to help us build, review, and harden security-sensitive software and infrastructure. This role sits within Security & IT and will focus on secure code review, production hardening of internal tooling, and cloud/network security coverage. As we scale AI-assisted development, HITRUST readiness, clinic connectivity, and internal systems, we need a senior engineer who can move across code, infrastructure, and security risk with strong, independent judgment. This is someone who can dig deeply into another engineer's work, review it rigorously, push back where needed, and set the technical direction for how we secure what we build.

What You'll Do

• Build and harden internal security-sensitive tooling alongside engineering and operations teams
• Dig deeply into engineers' code and review security-sensitive pull requests, especially for systems that may touch PHI
• Design and enforce security gates and guardrails across the SDLC, including automated CI/CD checks, pre-merge review requirements, and policy-as-code, so insecure or AI-generated code is caught before it ships
• Support application security reviews across platform and internal tooling
• Review security-relevant Terraform, cloud, firewall, routing, VPN, IPSec, VPC, and clinic connectivity changes
• Improve visibility into our security posture across AWS, GCP, clinic networks, and internal applications
• Help prepare engineering teams for HITRUST and customer security expectations

Qualifications

• Passion for AI safety and the role security engineering plays in building trustworthy AI systems
• At least 6+ years of software engineering experience implementing and maintaining security-relevant systems in production, including reviewing and raising the bar on other engineers' code
• Strong programming skills in Python or at least one systems language
• Experience contributing to cloud security controls
• Strong understanding of web application security and secure SDLC practices
• Familiarity with AWS and/or GCP
• Experience with Terraform or infrastructure-as-code
• A track record of reviewing PRs and giving clear, practical, and influential security feedback that other engineers act on
• Working knowledge of authentication, authorization, logging, secrets management, and data protection
• Strong judgment around sensitive data, especially in healthcare or regulated environments

Nice to Have

• Healthcare, HIPAA, HITRUST, or SOC 2 experience
• Experience securing AI-assisted development workflows
• Experience with Python, TypeScript, Node.js, or similar stacks
• Experience with Auth0, Okta, Kubernetes, EKS, RDS, or private cloud networking
• Experience with SAST, SCA, secret scanning, IaC scanning, or software supply chain security

Benefits

• Flexible work hours and flexible paid time off
• Work remotely
• Generous parental leave
• Comprehensive healthcare, vision and dental benefits
• Competitive salary and equity stake

Company Description

Together, we build and maintain impactful solutions through our pharmacy management system and data insights platform. These tools enable our internal teams, pharmacists, care coordinators, and clinical operations to streamline medication access, while helping external healthcare providers and clinics deliver better patient care.

Our engineering work presents exciting technical challenges as we balance user-facing features with robust internal systems. We release updates daily, requiring thoughtful prioritization and technical excellence while maintaining high quality. This iterative approach means we're constantly delivering meaningful improvements to our healthcare platform.

We're a fun, thoughtful, supportive, and down-to-earth group focused on doing some of the best work of our lives. We know software is built by people, and we're committed to taking care of both the people we work with and the patients whose lives we touch through our technology.