Principal Security Engineer
Candid Health5 months ago
Denver, CO, USA +2 moreStaff+
Base Salary
$240k - $310k/yr
Responsibilities
- Serve as the technical authority for security, set the technical bar, mentor engineers, and help build the security engineering culture.
- Lead the transition from a foundational security posture to a resilient enterprise security architecture.
- Partner with executive leadership to prioritize technical risks and integrate security into business strategy.
- Translate HIPAA, SOC2, SOC1, PCI, and HITRUST requirements into engineering controls and automated compliance processes.
- Promote secure-by-design practices through threat modeling, secure coding, and cross-functional collaboration.
- Oversee third-party penetration testing, vendor architecture reviews, and continuous automated and manual scrutiny of production environments.
Requirements
- 10+ years of experience in security engineering.
- Proven experience architecting secure systems across complex technical surface areas in startup and scaled enterprise environments.
- Deep understanding of sensitive, highly regulated datasets and the challenges of protecting critical information.
- Ability to code, architect secure infrastructure, threat-model distributed systems, and communicate security posture to enterprise customers and CISOs.
- Experience balancing pragmatic engineering trade-offs with defense-in-depth security.
Categories
About Candid Health
Candid Health builds revenue cycle management software that automates insurance claims, payments, and related back-office workflows for healthcare providers. It sells a platform and services to ambulatory practices and health systems, aiming to increase net collections and reduce cost to collect through AI-driven claim processing and denials management. The company is privately held and headquartered in San Francisco, serving U.S. healthcare organizations across specialties.