Lead Security Engineer - Remote

Overview

Solace is a healthcare advocacy marketplace that connects patients and families to experts who help them understand and take charge of their personal health.

In Short

• Lead Security Engineer role at Solace, a healthcare startup.
• First security engineering hire to build the security department.
• Responsible for securing patient-facing and internal web applications.
• Focus on protecting sensitive health data and shaping security posture.
• Own end-to-end security processes and implementation.
• Promote a security-first culture within the organization.
• Conduct threat modeling, vulnerability assessments, and penetration testing.
• Work with engineering, DevOps, and compliance teams for data privacy adherence.
• Monitor and respond to potential threats in real-time.
• Provide training and mentorship on secure development practices.

Requirements

• Experience in a start-up environment.
• 8+ years in web application security or related roles.
• Proficient in secure web development and auditing practices.
• Experience with threat modeling and security testing tools.
• Familiarity with regulatory frameworks.
• Experience in healthcare and HIPAA compliance.

Benefits

• Opportunity to shape the security culture from the ground up.
• Work in a fully remote team across the U.S.
• Be part of a mission-driven startup aiming to transform healthcare.
• Collaborative environment with cross-functional teams.
• Potential for personal and professional growth in a dynamic field.