Senior Product Security Engineer

Seattle, WA

98point6 Inc. logo
98point6 Inc.
Apply now Apply later

Posted 1 week ago

  Our mission is to deliver high-quality primary care that is accessible, convenient and affordable for all. Every single day you’ll be working on challenging problems with an exceptional team to profoundly transform primary care and improve people’s quality of life.   Your Role and Impact  

As a product security engineer at 98point6, you will collaborate with internal teams that deal with PHI belonging to a large number of patients and it is imperative that this data is secured. We are building our security team to help safeguard this information, and your work will improve our overall security posture. From testing an application to reviewing the overall network architecture, conducting trainings for our engineering team to writing our own tools to automate a workflow, you will be empowered to do the work that is most important for the organization. You will demonstrate the 98point6 core values daily as part of a unique culture driven to achieve our audacious goals.

  Responsibilities
  • Conduct code reviews of our applications and security configuration reviews of our AWS infrastructure
  • Design, implement, execute and report on penetration tests of our services and infrastructure
  • Contribute a security perspective to our application and infrastructure design process 
  • Develop threat models for our current and planned systems and infrastructure
  • Conduct or organize security training and outreach for our development teams
  • Design and develop security tools to improve our automated monitoring
  • Identify key performance metrics for security metrics and implement instrumentation for those metrics 
  • Develop and execute our processes for security event incident response
  • Perform third-party vendor security assessments and verify security compliance of vendors over time
Qualifications
  • 6+ years of experience in the security industry working in any combination of the following areas: threat modeling, secure coding, web and mobile application security, identity management and authentication, software development, cloud security or penetration testing
  • Experience implementing security solutions in mobile apps, web apps and backend services
  • Experience writing and reviewing code (Java, Python, Node or similar)
  • Experience working effectively with software engineering teams
  • Excellent written and verbal communication skills
  • Experience responding to security events preferred

98point6 provides equal employment opportunities to all without regard to race, color, religion, sex (including sexual orientation or gender identity), national origin, age, disability, genetic information or other protected status.

Job tags: Architecture AWS Incident response Java Penetration testing Python Security assessments