Rezilient Health

Employer-based hybrid primary and specialty care

Senior Security Engineer

Security Engineering & ArchitectureConfirmed live in the last 24 hours

Full-timeRemote in USARemote

About the Job

Requirements

A bachelor's degree in Computer Science, Cybersecurity, Information Technology, or a related field, or equivalent practical experience.
At least 5 years of experience in information security, security engineering, or a closely related technical role, ideally in healthcare, digital health, or SaaS/cloud environments.
Deep hands-on experience securing AWS cloud environments, including identity and access management, networking, encryption, logging, and cloud-native security services.
A strong background in application security, including threat modeling, secure code review, and security testing tools within continuous integration and continuous delivery pipelines.
Experience with identity and access management, endpoint security, and security monitoring or security information and event management tools.
Proven experience leading or supporting incident response and vulnerability management programs.
Working knowledge of security and compliance frameworks such as SOC 2, HIPAA/HITECH, HITRUST, ISO 27001/27002, or NIST Cybersecurity Framework, and experience providing technical evidence for audits.
Proficiency in scripting or programming, such as Python, Go, or Bash, and experience with infrastructure as code, such as Terraform.
Ability to explain technical risks to technical and non-technical audiences.
Comfort operating as a senior individual contributor in a fast-moving startup environment with broad ownership.

Responsibilities

Design, implement, and maintain security controls across cloud infrastructure, including network security, encryption, secrets management, logging, and configuration hardening.
Build and manage security guardrails using infrastructure as code, cloud-native security tools, and automated policy enforcement.
Assess cloud environments for misconfigurations, excessive permissions, and exposure risks, and drive remediation with Engineering.
Protect protected health information and personally identifiable information at rest and in transit through data classification, access restrictions, and retention controls.
Partner with Product and Engineering to embed security into the software development lifecycle from design through release.
Lead threat modeling and security design reviews for new features, integrations, infrastructure, and architecture decisions.
Own application security tooling and processes, including static and dynamic analysis, dependency and container scanning, and secure code review.
Establish secure development standards and coach engineers on secure coding practices and common vulnerability classes.
Assess third-party integrations, application programming interfaces, and electronic health record and partner data exchanges that handle patient data.
Partner with IT to design and enforce identity and access management controls, including single sign-on, multifactor authentication, role-based access, least privilege, and access reviews.
Build and tune security monitoring, logging, and alerting to detect suspicious activity across cloud, application, identity, and endpoint layers.
Serve as a technical lead during security incidents, coordinating investigation, containment, eradication, recovery, and post-incident review.
Develop and maintain incident response runbooks and lead tabletop exercises with cross-functional teams.
Own vulnerability management, including scanning, prioritization, remediation tracking, and coordination of penetration tests.
Monitor the threat landscape relevant to healthcare and cloud environments and adapt defenses proactively.
Produce evidence for technical controls for SOC 2, HIPAA/HITECH, HITRUST, and related frameworks.
Support audits, risk assessments, and remediation efforts with technical expertise, documentation, and control testing.
Contribute to security policies, standards, and procedures, ensuring they are technically sound and practical to operate.
Advise Engineering, Product, IT, and leadership on security, translating technical risk into business impact and recommendations.
Automate security processes and reduce manual work through scripting, tooling, and integration.
Contribute practical, role-specific security awareness guidance for engineers and staff.
Help shape the long-term information security roadmap and mentor team members as the security function grows.

Desired Qualifications

Experience protecting protected health information or other regulated data is strongly preferred.
Relevant certifications such as CISSP, CCSP, OSCP, GIAC certifications (for example, GCIH, GCLD, or GWAPT), or cloud security certifications are a plus.

Senior Security Engineer

Rezilient Health · United States (Remote) · Full-time · Posted 2026-10-29

Workplace: remote

Description

About the Company

At Rezilient, we’re redefining what primary care looks like, making it more accessible, seamless, and patient-centered than ever before. Through our innovative CloudClinic model, we combine virtual provider visits with smart, tech-enabled infrastructure to deliver timely, personalized care. By removing traditional barriers to access and continuously expanding our specialty offerings, we’re building a healthcare experience that’s as convenient as it is comprehensive.

About the Role

Rezilient is seeking a Senior Security Engineer to serve as a hands-on, senior individual contributor supporting our information security programs. This role is responsible for protecting the systems, data, and infrastructure that power Rezilient’s CloudClinic model, with a particular focus on safeguarding protected health information (PHI) and personally identifiable information (PII) across our cloud platform, clinical environments, and corporate systems.

You will design, build, and operate the technical security controls that keep Rezilient secure, from cloud and application security to identity and access management, endpoint protection, detection, and incident response. Working closely with Engineering, Product, IT, Clinical Operations, and our Security & Compliance team, you will embed security into how we build and run our platform, and provide the technical evidence and expertise that support frameworks such as SOC 2, HIPAA/HITECH, and HITRUST.

This is a senior IC role for an engineer who can move comfortably between architecture and execution. The ideal candidate brings deep technical expertise, sound judgment, and the ability to translate security needs into practical solutions that enable a fast-moving healthcare technology company to grow safely.

Key Responsibilities

Cloud & Infrastructure Security

Design, implement, and maintain security controls across Rezilient’s cloud infrastructure, including network security, encryption, secrets management, logging, and configuration hardening.
Build and manage security guardrails using infrastructure as code, cloud-native security tools, and automated policy enforcement.
Continuously assess cloud environments for misconfigurations, excessive permissions, and exposure risks, and drive remediation with Engineering.
Ensure PHI and PII are protected at rest and in transit, with appropriate data classification, access restrictions, and retention controls.

Application & Product Security

Partner with Product and Engineering to embed security into the software development lifecycle, from design through release.
Lead threat modeling and security design reviews for new features, integrations, infrastructure, and architecture decisions.
Own application security tooling and processes, including static and dynamic analysis, dependency and container scanning, and secure code review.
Establish secure development standards and coach engineers on secure coding practices and common vulnerability classes.
Assess the security of third-party integrations, APIs, and EHR and partner data exchanges that handle patient data.

Identity, Access & Endpoint Security

Partner with IT to design and enforce identity and access management controls, including SSO, MFA, role-based access, least privilege, and access reviews.

Detection, Response & Vulnerability Management

Build and tune security monitoring, logging, and alerting to detect suspicious activity across cloud, application, identity, and endpoint layers.
Serve as a technical lead during security incidents, coordinating investigation, containment, eradication, recovery, and post-incident review.
Develop and maintain incident response runbooks and lead tabletop exercises with cross-functional teams.
Own the vulnerability management program, including scanning, prioritization, remediation tracking, and coordination of penetration tests.
Monitor the threat landscape relevant to healthcare and cloud environments and proactively adapt defenses.

Security Governance & Compliance Support

Produce evidence for technical controls for SOC 2, HIPAA/HITECH, HITRUST, and related frameworks.
Support audits, risk assessments, and remediation efforts with technical expertise, documentation, and control testing.
Contribute to security policies, standards, and procedures, ensuring they are technically sound and practical to operate.

Technical Leadership & Security Culture

Act as a trusted security advisor to Engineering, Product, IT, and leadership, translating technical risk into clear business impact and recommendations.
Automate security processes and reduce manual work through scripting, tooling, and integration.
Contribute to security awareness efforts with practical, role-specific guidance for engineers and staff.
Help shape the long-term information security roadmap and mentor team members as the security function grows.

Requirements

Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, or a related field, or equivalent practical experience.
5+ years of experience in information security, security engineering, or a closely related technical role, ideally in healthcare, digital health, or SaaS/cloud environments.
Deep hands-on experience securing AWS cloud environments, including IAM, networking, encryption, logging, and cloud-native security services.
Strong background in application security, including threat modeling, secure code review, and security testing tools within CI/CD pipelines.
Experience with identity and access management, endpoint security, and security monitoring or SIEM tools.
Proven experience leading or supporting incident response and vulnerability management programs.
Working knowledge of security and compliance frameworks such as SOC 2, HIPAA/HITECH, HITRUST, ISO 27001/27002, or NIST CSF, and experience providing technical evidence for audits.
Proficiency in scripting or programming (e.g., Python, Go, or Bash) and experience with infrastructure as code (e.g., Terraform).
Excellent communication skills, with the ability to explain technical risks to both technical and non-technical audiences.
Comfort operating as a senior individual contributor in a fast-moving startup environment with broad ownership.
Experience protecting PHI or other regulated data is strongly preferred.
Relevant certifications such as CISSP, CCSP, OSCP, GIAC (e.g., GCIH, GCLD, GWAPT), or cloud security certifications are a plus.

Benefits

At Rezilient Health, we're on a mission to make humane healthcare truly abundant, and we invest in the people who make that possible. This is a high-impact role where your ideas directly shape how care is delivered, within a supportive, collaborative, and diverse team that believes healthcare is fundamentally a human experience. We back that commitment with a robust total rewards package:

Meaningful ownership through stock options, allowing you to share directly in the value you help create as we grow
Competitive base compensation
Comprehensive medical, dental, and vision coverage options, with Rezilient contributing toward your premiums
Complimentary access to Rezilient's clinical programs for you and your household members, the same connected care we deliver to our patients
401(k) retirement plan to support your long-term financial well-being
Flexible Paid Time Off, so you can recharge without counting days
Dedicated Paid Sick Leave, separate from your FTO, for when health needs come first
11 paid company holidays each year
Paid family leave to support you through life's biggest moments
Optional ancillary benefits, including life insurance, disability coverage, and a Health Savings Account (HSA)

Apply

Apply at Rezilient Health

About the Company

Rezilient Health

Employer-based hybrid primary and specialty care

Rezilient Health provides employer-sponsored direct primary and specialty care through its CloudClinic hybrid model. In neighborhood clinics, a nurse or medic conducts physical exams with connected diagnostic tools while a remote physician watches in real time and guides the visit, with options for labs, imaging, and 24/7 virtual care. Its approach combines in-person and telehealth to deliver multispecialty care and uses value-based contracts that tie payments to health outcomes rather than service volume. The company aims to lower overall employer healthcare spend and make comprehensive, accessible care more affordable for employees through preventative care and coordinated services.

Company size: 51-200
Company stage: Series A
Total funding: $14.7M
Headquarters: Brentwood, MO
Founded: 2016

Recently Posted Jobs

Explore more opportunities at Rezilient Health

See more jobs