SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
OpenLoop is a telehealth infrastructure platform that powers white-labeled clinical and operational solutions for companies delivering virtual care across all 50 states. The company handles protected health information at scale and operates in a regulated environment (HIPAA, HITRUST, SOC 2), making security a core part of care delivery rather than a compliance checkbox.
You will join the Security Architecture & Engineering (SAE) team as a Staff Security Engineer, owning and maturing the security of endpoint and email systems that the entire workforce depends on daily. This is a hands-on generalist role with deep technical expertise in endpoints and email security. You will engineer, deploy, and harden controls while partnering closely with the Security Operations team to ensure the telemetry and tooling you build actually serve their detection and response mission.
In the endpoint security domain, you will own the engineering of security controls for macOS and Windows fleets, including device management (MDM), disk encryption, patch compliance, and local admin controls. You'll engineer MDM and mobile application management (MAM) policies to protect company and PHI data on both managed devices and BYOD, including app protection, conditional access, and selective wipe. You'll deploy and manage an enterprise browser to secure SaaS and web access with data controls (copy/paste, download, print), session policies, and extension management. You'll build, apply, and continuously measure CIS Benchmark baselines across the fleet, tracking drift, managing documented exceptions, and producing fleet-level evidence for HITRUST and SOC 2 auditors. You'll also drive application control and least-privilege on endpoints without breaking the clinicians and operators who depend on them.
For email security, you will own the Google Workspace environment, including SPF, DKIM, DMARC enforcement, phishing and BEC defenses, attachment and link protection, and data loss prevention for PHI. You'll tune controls to reduce real risk and false positives, and partner with SecOps on phishing triage workflows.
Across the program, you will write security standards, configuration baselines, and runbooks that others can follow independently. You'll implement and validate controls identified through threat modeling and security reviews, contribute to audit readiness by mapping controls to HITRUST and SOC 2 requirements, and own evidence for your domains. You'll automate repetitive work and mentor engineers on SAE and adjacent teams, serving as an escalation point during incidents in your domains. You'll partner with IT, Engineering, Compliance, and SecOps, translating security risk into business and operational terms.
At the Staff level, your impact goes beyond individual tickets. You'll build controls that hold up for years, write standards other engineers follow, and raise the technical bar of the team around you. The role values judgment, end-to-end ownership, clear communication, and the ability to explain the why behind decisions.
REQUIREMENTS:
- 8+ years in security engineering with a track record of owning outcomes end to end
- Deep, hands-on expertise in endpoint security and email security
- Experience deploying and operating MDM/MAM platforms (Kandji, Jamf, Intune, or similar) and email security platforms
- Experience deploying and managing an enterprise browser platform
- Hands-on experience implementing CIS Benchmarks and measuring compliance at fleet scale
- Exposure to network security: secure remote access (ZTNA/VPN), DNS filtering, segmentation, or firewall policy
- Working knowledge of cloud security fundamentals (AWS preferred): IAM, network controls, logging, and how workforce access reaches cloud environments
- Exposure to DevSecOps practices: infrastructure as code, CI/CD security, secrets management, or security tooling in pipelines
- Scripting ability in Python, Bash, PowerShell, or similar
- Experience working in a regulated environment (HIPAA, HITRUST, SOC 2, PCI, or similar) and producing audit evidence
- Clear written communication: ability to write a standard, defend a decision, and explain risk to non-security executives
PREFERRED QUALIFICATIONS:
- Healthcare or health tech experience, especially environments handling PHI
- Experience with Okta or another enterprise identity provider
- Experience supporting a multi-entity organization with subsidiaries or acquisitions
- Relevant certifications (GIAC, CISSP, OSCP, or cloud security certs)
