Redox

Redox

Redox is a top integration platform enabling seamless interoperability between healthcare software and EHRs, accelerating implementations, reducing costs, and empowering healthcare innovators to bring cutting-edge solutions to market efficiently.

Internet Software & Services
51-250
$95M raised

Description

  • Own cloud security posture management, including Kubernetes and container security, admission control, network policies, image integrity, and environment hardening.
  • Manage the vulnerability lifecycle from triage through production remediation, prioritizing risks based on actual exposure.
  • Partner with Platform Engineering on secure SDLC practices and CI/CD safeguards, including artifact and pipeline integrity.
  • Translate HITRUST and SOC 2 requirements into practical technical configurations and operational controls.
  • Evaluate and secure Terraform infrastructure-as-code across environments.
  • Lead incident response, forensic investigations, and blameless post-mortem analyses.
  • Improve engineering security standards through design reviews, pairing, and peer mentorship.
  • Triage bug bounty reports and maintain professional relationships with external security researchers.

Requirements

  • 5+ years of security engineering experience delivering system hardening, security projects, and peer mentorship.
  • Strong Kubernetes security experience, including network policies, Kyverno admission control, and container hardening.
  • Threat-modeling experience for applications built with Node.js, TypeScript, Python, or Go.
  • Hands-on experience with secure SDLC and GitHub Actions CI/CD safeguards.
  • Experience hardening Terraform and managing secrets with AWS Secrets Manager, Vault, or similar tools.
  • Experience across the vulnerability management lifecycle, from triage through remediation.
  • Ability to apply HITRUST and SOC 2 frameworks to practical engineering controls.
  • Strong written communication skills for remote, asynchronous collaboration and documentation.
  • Proficiency with AI tools, prompt engineering, multiple LLM platforms, and AI workflow automation.
  • Preferred: experience securing agentic systems, MCP, LLM guardrails, NIST AI RMF, OWASP Top 10 for LLMs, VPNs, enterprise networks, or Renovate/Dependabot.
  • Preferred: familiarity with Go, Node.js, or TypeScript; Redox’s primary application language is TypeScript.
  • Must be eligible to work and reside in the continental United States.

Benefits

  • Fully remote work within the United States.
  • Autonomous, ownership-oriented culture with asynchronous collaboration.
  • Opportunity to work on security for a healthcare platform processing more than 1.2 billion messages monthly.
  • Equal employment opportunity and support for a diverse workforce.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

IT Security & Compliance Lead (Amsterdam, NLD)

B Lab 51-250 Diversified Consumer Services

B Lab is seeking a full-time IT Security & Compliance Lead in Amsterdam to establish consistent security governance, compliance, and risk management across its consolidating global network.

Cybersecurity Penetration Testing Salesforce
4 hours, 34 minutes ago

IT Security & Compliance Lead (São Paulo, BR)

B Lab 51-250 Diversified Consumer Services

B Lab is seeking an IT Security & Compliance Lead in São Paulo to establish consistent security governance, compliance, risk management, and incident-response practices across its consolidating global nonprofit network.

Cybersecurity Penetration Testing Salesforce
4 hours, 34 minutes ago

Information Security Engineer

Edmentum 1K-5K Diversified Consumer Services

Edmentum is seeking a Remote First Information Security Engineer to protect the systems, data, and learning platforms supporting millions of students while strengthening security operations and compliance.

Agile Penetration Testing
5 hours, 19 minutes ago

Middle+/Senior DevSecOps Engineer | TechCore

Boosta 501-1000 information technology & services

Boosta is hiring a Middle+/Senior DevSecOps Engineer for its service team to secure and support infrastructure and digital projects across the holding.

AWS Azure Bash CI/CD Cloudflare DNS Docker GCP GitHub Actions GitLab CI HashiCorp Vault Helm JavaScript Jenkins Kubernetes Python SIEM SOC SonarQube Terraform TLS WAF
1 day, 4 hours ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers