Senior Security Engineer

Please note:  This is a hybrid role requiring 3 days in office at our Philadelphia HQ - 1818 Market Street.

How you will help

As a part of our Security team, working alongside our R&D and other teams, you will be at the front line of security engineering and security operations. Security is paramount at HealthVerity and is critical in every business decision. You will own and implement security solutions across several security domains. You will know where the gotchas for security are and will implement or assist in implementing solutions that meet the strict demands of the healthcare data processing industry. Your team will support you and vice versa. Peer review of solutions and implementations is expected. 

 

What you will do

• Stay abreast of threats and advise leadership on how to mitigate against those threats as applicable to HealthVerity.
• Investigate, contain, and remediate security threats. Conduct event / incident post-mortem and ensure actionable lessons are incorporated into policies and procedures. 
• Take ownership of multiple security domains, e.g., IAM, vulnerability management, SIEM/SOAR, application security, and implement/mature solutions and automation.
• Develop automated run-books for dealing with security events / incidents.
• Manage multiple security tools and vendors.
• Collaborate with engineering teams to develop safe, robust, and scalable platforms and workflows, and improve security posture of existing products. 
• Perform security architecture reviews and assessment of applications and environments.
• Implement and assist in implementing solutions against the evolving requirements of FedRAMP.
• Work collaboratively with all teams at HealthVerity including IT, engineering, and customer focused teams.
• Mentor junior team members.
• Develop and roll out CTFs.
• Fill in leadership on a temporary basis.

 

How success is defined

• Your ability to work across different areas of security such as IAM, vulnerability management, SDLC, security architecture, threat modeling, incident response, forensics.
• Strong problem-solving skills, ability to think critically and act decisively under pressure, while managing multiple priorities and timelines.
• Prior experience dealing with security incidents, developing run-books, and training the organization.
• Experience with a wide range of incident response tools, such as AWS security services, EDR (Crowdstrike), SIEM, log analysis, vulnerability management, and malware analysis platforms.
• Work independently and as well as collaboratively with other stakeholders.
• Mentoring junior team members
• Keep up to date on the latest trends and topics in security.
• Automating everything.
• Fluent in shell scripting, Python, Go, Java, JavaScript, Perl or similar languages, as well as SlackOps.

 

Desired skills and experience

• Expert level experience in two or more security domains such as IAM, vulnerability management, SDLC, security architecture, threat modeling, incident response, forensics.
• Expert level Linux system administration experience, and strong knowledge of AWS.
• Strong experience in meeting security certification requirements (FedRAMP, HIPAA, SOC 2, etc)
• Experience designing and supporting scalable applications on distributed architectures.
• Hands on experience with automated infrastructure configuration management.
• Experience with data storage encryption implementations.
• 7+ years of IT and business/industry work experience.
• Added bonus: understanding of Healthcare IT standards.

 

Base salary for the role is commensurate with experience and can range between $110,000 - 160,000 + annual bonus opportunity.

   

Hiring Locations

Our main office is located in Center City, Philadelphia, where we operate on a hybrid model with in-office work required three days a week for local employees. We believe collaboration is most effective when teams come together, which is why we prioritize hiring in the Philadelphia area.

For certain roles, we also hire from hub locations—regions where we have an established presence with multiple team members working remotely. While these employees primarily work from home, we bring them together in person at lease once a year for team-building, collaboration, and strategic planning.

Due to tax and labor regulations, we can only hire from specific states. Remote work is supported in the following key hub locations and approved states:

Hub Locations:

• Philadelphia, Pennsylvania
• Boston, Massachusetts
<