SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Salary: USD 180,000 - 258,000 / annual
Candid Health is fixing medical billing in the US healthcare system, where providers spend over $250B annually on administrative overhead just to get paid by insurance. The company builds software backed by data science and machine learning to automate billing complexity, helping healthcare providers get paid more easily and inexpensively. Founded by Y Combinator W20 alumni and backed by top-tier investors (8VC, First Round Capital, BoxGroup), Candid Health is enabling innovation in opioid addiction treatment, women's health, weight loss, mental health access, and more.
As a Senior Security Engineer, you will be the guardian of Candid Health's systems and networks, ensuring resilience against threats while meeting strict healthcare compliance requirements. This is a hands-on role requiring deep engagement in both strategic and operational security.
Key responsibilities include: building security protections into systems for a secure-by-default posture; collaborating with engineering teams on design reviews and threat modeling to identify security flaws early; understanding and driving HIPAA, SOC2, SOC1, PCI, and HITRUST compliance rituals; regularly auditing platforms and tech stacks for vulnerabilities; and managing relationships with third-party security vendors for penetration testing and assessments.
You bring 4+ years of hands-on security experience with a proven track record on complex projects. You have strong HIPAA expertise and understand the compliance rituals and routines required in regulated environments. You're adaptable, able to engage with security challenges at both enterprise and client levels. You write code to automate security, and you can read, understand, and audit systems, networks, and IT setups to ensure comprehensive security. The role values humility, candor, outcome-driven work, and preparation.
