The Opportunity:We're hiring a Security Engineer to run Blueberry's day-to-day security operations. Reporting to the Head of Security, you'll find and fix vulnerabilities across our Google Cloud Platform environment and Python/Django applications, and manage the tools and controls that protect our devices, network, and accounts. Work in our codebase also offers a path into application security.
What you'll own:- Vulnerability management. Scan and monitor our GCP environment, self-hosted services, and dependencies, prioritize by risk, and track each issue to resolution.
- Remediation. Resolve vulnerabilities directly wherever you can, and partner with engineering on larger fixes.
- Detection and incident readiness. Maintain security logging, monitoring, and alerting, support incident investigations, and regularly test backups and recovery.
- Endpoint security. Deploy and manage EDR and MDM across company devices.
- Network security. Manage firewall and egress rules and network segmentation.
- Access management. Run access reviews, offboarding, and credential rotations.
- IT administration. Set up accounts and devices for new hires, administer our SaaS tools, and support teammates with device and account issues.
What Success Looks Like:Performance is data-driven and tied to the metrics you own, expected to center on:
- Time to remediate vulnerabilities, by severity
- Size and age of the open vulnerability backlog
- EDR and MDM coverage across devices
- On-time access reviews and offboarding
Experience You'll Need- 2+ years in security, cloud, systems administration, DevOps, or software engineering.
- Proficiency in Python and experience working in a production codebase.
- Strong Linux fundamentals, including patching and maintaining production systems.
- Experience with Google Cloud Platform or another major cloud provider.
- Hands-on experience with several of the following: vulnerability scanning, EDR, MDM, logging and monitoring, network security, and identity and access management. We'll support you in learning the rest.
- Experience with Django or web application development is a plus.
- Experience remediating vulnerabilities is a plus.
- Experience in healthcare or another regulated industry is a plus.
Expected compensation for this role: Base salary between $110,000 - $140,000 depending on location and experience. The role will also include equity.
Location: This role requires you to live and work in the United States. Because Blueberry is a medical practice, we are unable to support work from outside the US, including working while traveling internationally.
