We're hiring a Security Engineer to run Blueberry's day-to-day security operations. Reporting to the Head of Security, you'll find and fix vulnerabilities across our Google Cloud Platform environment and Python/Django applications, and manage the tools and controls that protect our devices, network, and accounts. Work in our codebase also offers a path into application security.

What you'll own:

Vulnerability management. Scan and monitor our GCP environment, self-hosted services, and dependencies, prioritize by risk, and track each issue to resolution.

Remediation. Resolve vulnerabilities directly wherever you can, and partner with engineering on larger fixes.

Detection and incident readiness. Maintain security logging, monitoring, and alerting, support incident investigations, and regularly test backups and recovery.

Endpoint security. Deploy and manage EDR and MDM across company devices.

Network security. Manage firewall and egress rules and network segmentation.

Access management. Run access reviews, offboarding, and credential rotations.

IT administration. Set up accounts and devices for new hires, administer our SaaS tools, and support teammates with device and account issues.

What Success Looks Like:

Performance is data-driven and tied to the metrics you own, expected to center on:

Time to remediate vulnerabilities, by severity

Security Engineer

Responsibilities

Qualification

Required

Benefits

Company

Blueberrypediatrics

More roles at Blueberrypediatrics