Staff Software Engineer - Product Security

Salary: $221,000 - 260,000 per year Requirements:

• 8+ years of software engineering experience, including at least 3 years focused on security infrastructure or application security
• Demonstrated success designing and delivering large-scale, distributed, cloud-native systems
• Strong programming skills in Python, TypeScript, Go, and/or Rust
• Solid knowledge of cloud security, with Google Cloud Platform preferred; AWS or Azure also considered
• Hands-on experience with Kubernetes, containers, and infrastructure as code using Terraform
• Familiarity with security testing tools and secure SDLC practices
• Excellent written and verbal communication, plus strong documentation abilities
• Preferred: expertise in Zero Trust design, authentication and authorization frameworks, and data loss prevention
• Preferred: experience automating security compliance for SOC 2, ISO 27001, PCI-DSS, or NIST
• Preferred: background in security telemetry and threat detection for data systems
• Preferred: exposure to AI/ML security and AI-assisted analysis tools
• Preferred: experience hardening CI/CD pipelines and securing software supply chains
• Preferred: relevant certifications such as CISSP, Google Cloud Platform Professional Cloud Security Engineer, or OSCP

• Design and deploy scalable infrastructure that supports HIPAA, SOC 2, and ISO 27001 compliance
• Build and support identity, authentication, and access management systems using tools such as Okta, Google Cloud Platform IAM, Auth0, and OPA
• Implement observability and anomaly detection across microservices, data stores, and SaaS tools
• Apply Zero Trust principles and enforce least-privilege access across the company
• Create compliance dashboards and automate evidence gathering
• Develop self-service security tooling that fits into developer workflows such as GitLab CI/CD and Terraform
• Automate onboarding, offboarding, access reviews, and approval processes
• Integrate software supply chain protections such as SBOM and dependency scanning
• Explore and adopt AI-assisted security tools to identify risks proactively
• Automate policy enforcement, SAST/DAST scanning, and compliance checks
• Lead threat modeling and security architecture reviews for new products and services
• Work with product and data teams to build secure-by-default patterns
• Ensure encryption, access tracing, and safe data handling across PHI-related workflows
• Contribute to incident response, postmortems, and ongoing security improvements
• Serve as our technical lead for security engineering
• Mentor teammates and promote secure coding and architecture practices
• Collaborate with Engineering, Compliance, Clinical, and Legal teams on security strategy
• Foster a culture of transparency, accountability, and continuous improvement

• AI
• AWS
• Azure
• CI/CD
• Cloud
• GitLab
• IAM
• Support
• Kubernetes
• Maven
• Python
• Rust
• Security
• Terraform
• TypeScript
• microservices

More:

We are Maven Clinic, the worlds largest virtual clinic for women and families, on a mission to make healthcare work for all of us. Through Maven Enterprise, we partner with more than 2,300 employers and health plans to deliver end-to-end womens and family health programs across fertility and family building, maternity and newborn care, parenting and pediatrics, and menopause and midlife. Our consumer platform also offers virtual care across 30+ specialties, along with dedicated hormone and GLP-1 care programs built for women. Founded in 2014 by CEO Kate Ryder, we have raised more than $425 million from leading healthcare and technology investors and have been recognized by TIME, CNBC, Fast Company, and Fortune for innovation and as one of the best places to work. This role offers a base salary range of $221,000 to $260,000 per year, plus equity and benefits. We provide a flexible hybrid work model, with teams primarily based in the New York Metropolitan area and remotely in San Francisco/Bay Area, Seattle, Boston, DC, and Chicago, alongside onsite collaboration expectations depending on location. Our benefits include access to the Maven platform for employees and their families, wellness partnerships, hybrid work support, paid parental leave, a new parent stipend, professional development funding, career coaching, and 401(k) matching for US-based employees.

last updated 33 week of 2026