Security Engineer

Blueberry's Mission: Our mission is to turn every family’s living room into their own personal pediatric urgent care. We combine home exam kits, concierge-like access, and AI-enabled Pediatricians to provide affordable and near-instant clinic-level care, 24/7. We believe every child deserves access to top-quality healthcare. We’ve proven that by drastically improving access and turning healthcare into a consumer-grade experience, we drive better health outcomes for children and families while dramatically reducing medical costs for parents and health plans (up to 50% reduction in ED costs). We are a mission and values driven company. You can learn more about our values HERE https://drive.google.com/file/d/1WbORoU9L17875Re3r0psjPcALDGUvDMa/view. 🫐 💙 Note: Beware of Scammers. Blueberry will NEVER ask you to download software/apps or request sensitive personal information like bank accounts or social security numbers. If you received an email requesting this information it is likely a scam. We are only accepting candidates through our job board. THE OPPORTUNITY: We're hiring a Security Engineer to run Blueberry's day-to-day security operations. Reporting to the Head of Security, you'll find and fix vulnerabilities across our Google Cloud Platform environment and Python/Django applications, and manage the tools and controls that protect our devices, network, and accounts. Work in our codebase also offers a path into application security. WHAT YOU'LL OWN: - Vulnerability management. Scan and monitor our GCP environment, self-hosted services, and dependencies, prioritize by risk, and track each issue to resolution. - Remediation. Resolve vulnerabilities directly wherever you can, and partner with engineering on larger fixes. - Detection and incident readiness. Maintain security logging, monitoring, and alerting, support incident investigations, and regularly test backups and recovery. - Endpoint security. Deploy and manage EDR and MDM across company devices. - Network security. Manage firewall and egress rules and network segmentation. - Access management. Run access reviews, offboarding, and credential rotations. - IT administration. Set up accounts and devices for new hires, administer our SaaS tools, and support teammates with device and account issues. WHAT SUCCESS LOOKS LIKE: Performance is data-driven and tied to the metrics you own, expected to center on: - Time to remediate vulnerabilities, by severity - Size and age of the open vulnerability backlog - EDR and MDM coverage across devices - On-time access reviews and offboarding EXPERIENCE YOU'LL NEED - 2+ years in security, cloud, systems administration, DevOps, or software engineering. - Proficiency in Python and experience working in a production codebase. - Strong Linux fundamentals, including patching and maintaining production systems. - Experience with Google Cloud Platform or another major cloud provider. - Hands-on experience with several of the following: vulnerability scanning, EDR, MDM, logging and monitoring, network security, and identity and access management. We'll support you in learning the rest. - Experience with Django or web application development is a plus. - Experience remediating vulnerabilities is a plus. - Experience in healthcare or another regulated industry is a plus. Expected compensation for this role: Base salary between $110,000 - $140,000 depending on location and experience. The role will also include equity. Location: This role requires you to live and work in the United States. Because Blueberry is a medical practice, we are unable to support work from outside the US, including working while traveling internationally. We are an equal opportunity employer and value diversity at our company. We do not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status.