Principal Security Engineer
Imagine Pediatrics11 hours ago
Remote, United StatesStaff+
Base Salary
$195k - $225k/yr
Responsibilities
- Set the technical vision and long-term strategy for endpoint, email, data loss prevention, vulnerability management, penetration testing, network, application, data, cloud, and identity security.
- Define cloud and identity security strategy across Microsoft Azure/Entra ID and AWS, including privileged access, phishing-resistant MFA, and non-human identity governance.
- Lead security architecture reviews and threat modeling for Care Hub, Medplum services, healthcare APIs, and Snowflake data platforms.
- Define DevSecOps strategy and standardize security gates across the SDLC and CI/CD pipeline using GitHub Advanced Security, OWASP Top 10 practices, software bills of materials, and CISA Known Exploited Vulnerabilities prioritization.
- Serve as the senior technical escalation point for complex security events, participate in on-call rotation, and strengthen incident, ransomware, SaaS recovery, and restoration-testing playbooks.
- Build scalable security posture documentation and evidence pipelines for HITRUST, HIPAA, NIST, payor, auditor, and regulator requirements.
- Drive automated configuration checks, drift detection, security roadmap sequencing, engineering planning, proofs of concept, and secure AI adoption.
- Partner with engineering, product, IT, and clinical stakeholders to embed security into digital products and translate security risks for non-technical audiences.
- Mentor the security engineering team and coach engineers on security craftsmanship and professional development.
Requirements
- Bachelor of Science degree in Computer Science, Information Security, Business, Management, or a related field is desired; an advanced degree is a plus.
- 10+ years of experience as a Security Engineer, Principal Security Engineer, Security Architect, or similar, including at least 5 years in healthcare.
- Track record of setting security technical strategy and aligning security, IT, and engineering teams.
- Deep expertise in cloud and identity security architecture across AWS and Microsoft Azure/Entra ID.
- Hands-on experience with application and product security, threat modeling, secure SDLC and CI/CD design, and healthcare APIs including FHIR and SMART on FHIR; Medplum experience is a plus.
- Experience leading detection and response programs, working with MDR providers, and responding technically to serious incidents and data breaches.
- Extensive experience translating HITRUST and HIPAA Security Rule requirements into technical controls and supporting auditors, payors, and regulators.
- Experience applying AI to automate security processes and understanding the security risks introduced by AI systems.
- Knowledge of AWS, Microsoft Intune, Entra ID, CrowdStrike Falcon, GitHub Advanced Security, Snowflake, JAMF, Meraki, and JIRA Service Management.
- Relevant certifications such as CISSP, CCSP, CISM, GIAC, AWS Certified Security – Specialty, or Microsoft Certified: Cybersecurity Architect Expert are preferred.
- Strong collaboration, coaching, autonomous decision-making, ambiguity management, and senior-engineer development skills.
- Willingness to participate in an on-call rotation; security-community contributions such as conference talks, publications, or threat-intelligence sharing are a plus.
Benefits
- Base salary of $195,000-$225,000 plus an annual bonus incentive and eligibility for an employee equity purchase program.
- Competitive medical, dental, and vision insurance.
- Healthcare and Dependent Care FSA and a company-funded HSA.
- 401(k) with a 4% match, vested 100% from day one.
- Employer-paid short- and long-term disability and life insurance at 1x annual salary.
- 20 days of PTO, 10 company holidays, and 2 floating holidays.
- Paid new parent leave and additional benefits detailed in the offer.
About Imagine Pediatrics
Imagine Pediatrics is a privately held, tech-enabled, pediatrician-led medical group that delivers 24/7 virtual-first and in-home care for children with special health care needs. It coordinates medical, behavioral, and social services alongside existing providers and partners with families and health plans rather than replacing local care teams. The company serves patients in FL, GA, MO, NY, NC, NJ, TN, TX, and Washington, D.C.