SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Stedi is a Series B healthcare clearinghouse and RCM (Revenue Cycle Management) engine built on modern APIs. The company has raised $142M from top-tier investors including Stripe, Addition, USV, and Bloomberg Beta. Stedi's headless architecture allows developers and AI agents to build custom interfaces on top of a core platform that handles mission-critical EDI transactions for healthcare technology businesses.
You will lead Stedi's scaling security function as a Security Engineering Manager—a true player-coach role. You'll manage a team of security engineers while remaining deeply technical, writing infrastructure-as-code (CDK in TypeScript), building security playbooks, and driving security projects yourself. Your mandate is to own security across AWS infrastructure, the software development lifecycle, endpoint security, and compliance posture, while ensuring every engineer at Stedi can build securely without sacrificing innovation velocity.
Key responsibilities include:
- Leading and growing a high-performing security team with ambitious standards and hiring as the function scales
- Overseeing compliance engineering to meet SOC, HIPAA, and HITRUST requirements
- Managing daily engineering efforts, monitoring timelines and resources for efficient execution
- Setting clear performance expectations and regularly reviewing progress
- Continuously assessing vulnerabilities and prioritizing remediation based on actual business and customer risk
- Mentoring engineers and embedding security as a shared responsibility across the organization
Stedi's technical stack is AWS-exclusive for customer-facing infrastructure, using serverless technologies (Lambda, API Gateway, SQS, SNS, DynamoDB, Aurora Serverless) and CDK (TypeScript) for infrastructure as code. The company ships rapidly with a lean, high-performing engineering culture.
REQUIREMENTS:
- 6+ years of experience in security or security-adjacent roles, with at least 3+ years in a management role
- Experience with compliance frameworks (SOC, HIPAA, HITRUST) and control design
- Hands-on experience in application security and endpoint security
- Exceptional written communication skills; ability to synthesize and convey complex technical and risk information to engineers and executives
- Proven experience managing and fostering collaboration in a remote-first environment
- Commitment to cultivating high-performing teams
- High bandwidth with ability to manage multiple priorities simultaneously and context-switch effectively
- Philosophical alignment with Stedi's ways of working
