Design, implement, and maintain security controls and architectures to protect the company's cloud infrastructure, applications, and data from cyber threats.

Improve our cloud security posture and vulnerability management program — pull-request scanning, triage and tracking of findings to closure across engineering teams, and coverage and license optimization.

Build and enforce software supply chain controls across the developer toolchain — package, dependency, and extension guardrails, with enforcement thresholds tuned to reduce noise rather than generate it.

Extend security into CI/CD pipelines, including the emerging problem of governing AI-authored code at the pipeline chokepoint.

Build automation, internal tooling, and integrations against our developer platform and security stack so that security controls are self-service rather than ticket-driven.

Partner with Platform & Software Engineering teams to create visibility and awareness of security issues and work to prioritize their resolution in a collaborative way.

Perform security assessments, including code reviews and application security testing, to identify and mitigate risk in new and changing systems.

Participate in a weekly on-call rotation for managed detection and response escalations; investigate potential threats, respond to security incidents, and perform root cause analysis.

Develop and maintain security standard operating procedures and policies in accordance with industry best practices and regulatory requirements (e.g., HIPAA, NIST CSF).

Stay informed of the latest developments in tactics, techniques, and procedures related to application and infrastructure vulnerabilities — especially in the healthcare space — and adapt the strategy or tooling to address new threats.

Security Engineer

Responsibilities

Qualification

Required

Preferred

Benefits

Company

Rvo Health

More roles at Rvo Health