Redox

Redox

Redox is a top integration platform enabling seamless interoperability between healthcare software and EHRs, accelerating implementations, reducing costs, and empowering healthcare innovators to bring cutting-edge solutions to market efficiently.

Internet Software & Services
51-200
$95M raised

Description

  • Own cloud security posture management, including Kubernetes and container security, admission controls, network policies, image integrity, and environment hardening.
  • Manage the vulnerability lifecycle and prioritize remediation based on production exposure.
  • Partner with Platform Engineering to implement secure SDLC and CI/CD safeguards, artifact validation, and pipeline integrity controls.
  • Translate HITRUST and SOC 2 requirements into technical configurations and operational controls.
  • Evaluate and harden infrastructure-as-code across environments.
  • Conduct incident response, forensic investigations, and blameless post-mortem reviews.
  • Contribute to engineering security standards through architecture and design reviews, pairing, and peer mentorship.
  • Triage bug bounty reports and engage professionally with external security researchers.
  • Identify, scope, and operationalize platform security improvements from design through implementation.

Requirements

  • 5+ years of security engineering experience, including system hardening, security projects, and peer mentorship.
  • Strong Kubernetes security expertise, including network policies, Kyverno admission control, and container hardening.
  • Experience threat modeling applications built with Node.js, TypeScript, Python, or Go.
  • Hands-on experience securing SDLC and CI/CD workflows with GitHub Actions, including artifact validity and pipeline integrity.
  • Experience hardening Terraform infrastructure-as-code and managing secrets with AWS Secrets Manager, Vault, or similar tools.
  • Experience managing vulnerabilities from triage through production remediation.
  • Ability to translate HITRUST and SOC 2 frameworks into practical engineering controls.
  • Strong written communication skills for remote, asynchronous collaboration.
  • Proficiency with AI tools, prompt engineering, multiple LLM platforms, and AI workflow automation.
  • Must be eligible to work in the U.S. and reside in the continental U.S.
  • Experience securing AI agents, MCP, LLM prompt-injection risks, or applying NIST AI RMF and OWASP Top 10 for LLMs in production (preferred).
  • Familiarity with Go, Node.js, TypeScript, VPN or enterprise network security, Renovate, or Dependabot (preferred).

Benefits

  • Fully remote role within the United States.
  • Remote-first, asynchronous work environment with transparent collaboration and autonomy.
  • Opportunity to own high-impact security work protecting healthcare data.
  • Collaborative senior security team with opportunities for mentorship and professional growth.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

Principal IAM Engineer

Lantern is seeking a remote Principal IAM Engineer to own and strengthen the identity control plane that governs secure access to PHI across its specialty-care platform.

GitHub HIPAA OpenID Connect PowerShell Python SAML Terraform
8 hours ago

Vigilant IT Security Manager - Portugal/Poland (Remote)

Laminar Projects 51-200 Construction & Engineering

Lead IT security and operations at Laminar Projects, a construction-technology consultancy, to strengthen cybersecurity, maintain compliance, and build a high-performing IT function.

Cybersecurity
10 hours, 45 minutes ago

Interim Head of Information Security

N-iX 1001-5000 Internet Software & Services

N-iX is seeking an Interim Head of Information Security for a 4–6-month engagement to lead a client’s security strategy, embed secure-by-design practices, and strengthen audit readiness and resilience.

Cybersecurity
11 hours ago

Network Security Engineer

FireMon.com 201-500 Professional Services

FireMon is seeking a hands-on Network Security Engineer to develop, test, and support integrations that help enterprises govern network security policy across on-premises, cloud, and hybrid environments.

Cisco Juniper Network Security
11 hours ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers