Senior Security Engineer

As the amount of biomedical data types and scale continues to grow, old ways of working with data hold back the pace of progress — fragmented data, overwhelming omics, complex manual work, analysis backlogs, friction in secure collaboration, and barriers to distributing workflows. We have a conviction about how to move closer to a future of precision medicine by making it ten times faster and one-tenth the cost to generate knowledge, develop better treatments, and improve patient outcomes.

As a result, Manifold began its journey. We’re a health research infrastructure company that enables researchers to focus on the high-impact research that matters most, by taking care of all the other stuff that gets in the way. As a trusted research platform for modern scientific collaboration, we partner with top-tier healthcare providers, life sciences organizations, and research institutions to unlock real-world data and deliver actionable insights that improve precision medicine and discovery.

We’re currently a Series B funded startup with 50+ employees across North America. Backed by top-tier investors and healthcare leaders including; Andrew Marks of TQ Ventures, Jason Schoettler of Calibrate Ventures, Gaurav Singal of Foundation Medicine, Steve Fredette of Toast, Amar Kendale of Livongo, Andrew Bialecki of Klaviyo, Brad Porter of Amazon, Jon Karlen of Acadian Software, and Pravin Soni of Elevation Pharma.

Our Culture

At Manifold, we value intellectual rigor, humility, and mission-driven collaboration. We believe that technology is only as powerful as the people behind it, and we’re building a culture that supports growth, inclusion, and curiosity. We work fast, think deeply, and strive to make a lasting impact on patients' lives.

About the Role

Manifold is looking for a Security Engineer specializing in Vulnerability Management, to focus on identifying, assessing, and mitigating security risks in our organization's systems and networks.

This role involves proactive security programs, threat modeling, in-depth technical assessments, and leading strategic security planning. Key responsibilities include managing the vulnerability lifecycle, driving automation initiatives, and ensuring the organization's security strategy aligns with industry standards.

What You’ll Do

• Identifying and Discovering Vulnerabilities:

  Use various techniques like vulnerability scanning, penetration testing, and bug bounties to uncover weaknesses in systems, applications, and networks.

• Analyzing and Assessing Vulnerabilities:

  Analyze the potential impact of vulnerabilities, consider the likelihood of exploitation, and assess the overall risk.

• Prioritizing Risks:

  Prioritize vulnerabilities for remediation, focusing on those that pose the greatest threat to the organization's assets and data.

• Remediating and Mitigating Vulnerabilities:

  Work with engineering, IT, and other teams to implement patches, fix vulnerabilities, and implement mitigation strategies.

• Validating and Monitoring:

  Validate that vulnerabilities have been successfully addressed and continue to monitor the system for new or re-emerging vulnerabilities.

• Driving Automation and DevSecOps:

  Automate vulnerability scanning, assessment, and reporting processes to improve efficiency and scalability, and to integrate security practices into the software development lifecycle.

• Managing Sensitive Data:

  Maintain security controls and compliance requirements for handling sensitive customer data, including clinical records, HIPAA-protected health information, and Federal data sets.

• Collaborating with Other Teams:

  Collaborate with Engineering and Corporate IT to enhance overall security posture.

• Continuous Learning:

  Stay updated on the latest security threats, vulnerabilities, and best practices to effectively manage and mitigate risks.

 

What You’ll Bring

• Strong understanding of security principles, network architecture, and operating systems.
• Experience with various vulnerability scanning tools and techniques.
• Experience patching cloud infrastructure and code dependencies.
• Familiarity with security standards and frameworks like NIST 800-53, FedRAMP, ISO27001, HIPAA.
• Ability to perform root cause analysis and develop effective remediation plans.
• Strong analytical and problem-solving skills.
• Good communication and collaboration skills.

The Security Engineer plays a critical role in maintaining a strong security posture