Staff Application Security Engineer

AT A GLANCE

RVO Health is a first-of-its-kind comprehensive consumer healthcare platform that meets people where they are in their personal journeys and connects them with both the information and the care they need. RVO Health is a partnership between Red Ventures and UnitedHealth Group’s Optum Health. Together we’re focused on delivering on our vision of a stronger and healthier world. RVO Health has the largest consumer health and wellness audience online. Every month, we help nearly 100 million people take steps on their daily journey to lifelong well-being. 

As part of our RVO Health Security team, in this role you will play a significant part in protecting our PHI and other sensitive data from misuse and breaches. You will work in Agile Scrum environment, collaborating closely with the business product management and members of a global engineering team. You will apply your skills in a highly dynamic, innovative, forward-thinking environment that follows industry best practices and fosters security culture. 

A qualified candidate is an experienced engineer with solid security understanding and experience, advanced knowledge of modern frameworks, strong software security experience, and experience with defining technical solutions. This person will develop a security program in collaboration with engineering and other stakeholders to define innovative security solutions.

What You’ll Do

• Collaborate with product and IT stakeholders to build an understanding of security programs and how to advance our posture.
• Demonstrate a strong interest in application architecture and solution design 
• Recommend complex integrated security solutions that fulfill business requirements and align with technology roadmaps 
• Design and develop security solutions in collaboration with business and IT stakeholders 
• Contribute to defining technical road maps; identify technical improvement and refactoring opportunities 
• Ensure that all delivered solutions adhere to industry best practices for security and protection of sensitive/protected data. 
• Work with geographically distributed Agile teams 
• Work with product owners, product managers, and other stakeholders to groom & solution features 
• Provide accurate and timely estimates for features, user stories, and tasks 
• Identify and implement innovative solutions to non-standard requests and problems 
• Be aware of current security trends, tools, and requirements 
• Provide input to planning activities 
• Participate in rotational on-call schedules as needed 
• Work outside of standard office hours as needed and, on occasion, support night-time releases 

What We’re Looking For

• Bachelor’s degree in Computer Science, related field OR equivalent experience 
• Expert level experience with Object Oriented Programming Languages such as Scala, and Java and modern back-end development frameworks, such as Play, Spring 
• Significant experience leveraging SAST / DAST tools
• Deep knowledge of OWSAP 10 & Serverless OWASP 10 detection and remediation.
• 3+ years leveraging and configuration of application security tools into automated software deployment chain.
• Container security and docker experience
• Management of cloud infrastructure with IaC, specifically terraform. ( I think is a must have given the size of our terraform footprint) 
• Knowledgeable experience with securing RESTful APIs
• Experience with CI/CD pipelines
• Experience with Relational Databases and data access controls
• Software Implementation and integration experience
• Working knowledge of or experience with Agile development lifecycle

Nice to Have

• General experience working in a network or cloud security environment (logging, SIEM, Incident Response, Threat Hunting, SOC, etc)
• Working understanding and experience with Terraform
• Experience working in a cloud environment (AWS, Azure, GCP)

Pursuant to various state Fair Pay Acts, below is a summary of compensation elements for this role at the company. The following benefits are provided by RVO Health, subject to eligibility requirements.

• Starting Salary: $150,000 - $203,000
  *Note actual salary is based on geographic location, qualifications and experience
• Health Insurance Coverage (medical, dental, and vision)
• Life Insurance
• Short and Long-Term Disability Insurance
• Flexible Spending Accounts
• Paid Time Off
• Holiday Pay
• 401(k) with match
• Employee Assistance Program
• Paid Parental Bonding Benefit Program

This position may occasionally require travel for training and other work-related duties.

W