RemoteLeaf Logo
Log in Sign up

Director of IT & Security, CISO

5 months ago
United States
Full-time
Executive
DevOps Engineer
DevOps and Infrastructure
AWS CI/CD CrowdStrike DevSecOps HIPAA Penetration Testing
Apply Now
Redox

Redox

Redox is a top integration platform enabling seamless interoperability between healthcare software and EHRs, accelerating implementations, reducing costs, and empowering healthcare innovators to bring cutting-edge solutions to market efficiently.

Internet Software & Services
51-250
$95M raised
View All Jobs 9

Description

  • Own the end-to-end security strategy across cloud, application, infrastructure, and corporate environments.
  • Define and execute a pragmatic security roadmap aligned to business risk, regulatory requirements, and engineering velocity.
  • Serve as executive owner for security posture, risk management, and incident response.
  • Drive a DevSecOps-first operating model by embedding security into CI/CD pipelines, infrastructure as code, and developer workflows.
  • Lead threat modeling, secure design reviews, and risk assessments for new platform initiatives.
  • Own security architecture and operations for a primarily AWS-based environment.
  • Lead application security programs including secure SDLC, dependency scanning, SAST/DAST, penetration testing, and vulnerability management.
  • Own identity and access management strategy, with Okta as the backbone.
  • Build and run security operations, including monitoring, investigation, incident response, and post-incident learning.
  • Own corporate IT strategy and execution, including end-user computing, device management, and SaaS access governance.
  • Drive automation and standardization across onboarding, offboarding, access management, and device lifecycle.
  • Lead and mentor a high-performing team across security engineering, security operations, and IT.

Requirements

  • 10+ years of experience in information security, IT, or related technical leadership roles.
  • 5+ years of people management experience, ideally in healthcare technology SaaS.
  • Experience leading security engineering, security operations, and corporate IT in a cloud-native SaaS environment.
  • Direct experience in healthcare or another highly regulated industry.
  • Proven track record implementing DevSecOps practices.
  • Deep hands-on experience securing AWS environments.
  • Strong understanding of endpoint security, identity systems, and modern SaaS IT stacks.
  • Practical knowledge of tools such as CrowdStrike, Okta, Flashpoint, RAD, and related platforms.
  • Strong foundation in application security, cloud security, and infrastructure as code.
  • Ability to work in the U.S. and reside/work in the continental U.S.
  • Preferred experience securing autonomous agentic loops and tool-calling frameworks.
  • Preferred experience with indirect prompt injection, human-in-the-loop guardrails, MCP security, and continuous compliance.
  • Preferred experience migrating security programs to Vanta or similar automated GRC platforms.
  • Preferred hands-on application of the NIST AI RMF and OWASP Top 10 for LLMs in production environments.

Benefits

  • Base salary range of $224,000 to $260,000 per year.
  • Stock options as part of the total rewards package.
  • 100% remote-first culture for U.S.-based employees.
  • Unlimited flexible time off.
  • 15+ observed holidays.
  • Rest & R^Charge days with a guaranteed three-day weekend each month.
  • R^Charge sabbatical: 6 weeks paid sabbatical plus stipend.
  • 401(k) match of 50% up to 8% starting on Day 1.
  • Medical, dental, and vision coverage starting on Day 1.
  • HSA, FSA, life, disability, medical travel, and employee assistance program benefits.
  • Paid parental leave of 16 weeks.
  • Productivity stipend and wellness fund.
  • Redox-issued MacBook.
  • Virtual and/or in-person team and company events.
  • Employee referral bonus program.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

SpotMe

Security Operations Engineer (Europe - Remote)

SpotMe 51-250 Professional Services

SpotMe is hiring a Security Operations Engineer to strengthen security across its identity systems, macOS fleet, SaaS tools, and internal telemetry supporting its B2B event and healthcare engagement platforms.

Europe Full-time Mid Level Security Engineer
HTTP macOS REST API SAML
8 hours, 24 minutes ago
AssemblyAI

Security Operations Engineer

AssemblyAI 51-250 Media

AssemblyAI is hiring a Security Operations Engineer to run and strengthen the security operations and GRC program protecting its Voice AI infrastructure, products, and customer data.

United States Full-time Mid Level Security Engineer
$180k-$220k
AWS Python SIEM Terraform
8 hours, 39 minutes ago
Tines

Senior Security Operations Engineer

Tines 51-250 Construction & Engineering

Tines is hiring a Senior Security Operations Engineer to mature its security program by building scalable detection, response, vulnerability management, and automation capabilities across cloud and corporate environments.

United States Full-time Senior Security Engineer
$160k-$180k
AWS Azure Docker Go Kubernetes Linux macOS Python
8 hours, 54 minutes ago
DISHER Talent Solutions

Senior Azure DevOps Engineer

DISHER Talent Solutions Professional Services

Senior Azure DevOps Engineer at a supply chain solutions company, owning Azure infrastructure, CI/CD, and operational practices while modernizing the cloud platform supporting applications, data, integrations, and AI workloads.

United States Full-time Senior DevOps Engineer
Azure CI/CD DevSecOps Docker GitHub Actions Kubernetes Terraform
8 hours, 54 minutes ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers