Security Engineer - Blueberry Pediatrics

About Blueberry Pediatrics

Our mission is to turn every family’s living room into their own personal pediatric urgent care. We combine home exam kits, concierge-like access, and AI-enabled Pediatricians to provide affordable and near-instant clinic-level care, 24/7. We believe every child deserves access to top-quality healthcare.

We’ve proven that by drastically improving access and turning healthcare into a consumer-grade experience, we drive better health outcomes for children and families while dramatically reducing medical costs for parents and health plans.

The Opportunity

We're hiring a Security Engineer to run Blueberry's day-to-day security operations. Reporting to the Head of Security, you'll find and fix vulnerabilities across our Google Cloud Platform environment and Python/Django applications, and manage the tools and controls that protect our devices, network, and accounts. Work in our codebase also offers a path into application security.

What You'll Own

• Vulnerability management: Scan and monitor our GCP environment, self-hosted services, and dependencies, prioritize by risk, and track each issue to resolution.
• Remediation: Resolve vulnerabilities directly wherever you can, and partner with engineering on larger fixes.
• Detection and incident readiness: Maintain security logging, monitoring, and alerting, support incident investigations, and regularly test backups and recovery.
• Endpoint security: Deploy and manage EDR and MDM across company devices.
• Network security: Manage firewall and egress rules and network segmentation.
• Access management: Run access reviews, offboarding, and credential rotations.
• IT administration: Set up accounts and devices for new hires, administer our SaaS tools, and support teammates with device and account issues.

What Success Looks Like

Performance is data-driven and tied to the metrics you own, expected to center on:

• Time to remediate vulnerabilities, by severity
• Size and age of the open vulnerability backlog
• EDR and MDM coverage across devices
• On-time access reviews and offboarding

Experience You'll Need

• 2+ years in security, cloud, systems administration, DevOps, or software engineering.
• Proficiency in Python and experience working in a production codebase.
• Strong Linux fundamentals, including patching and maintaining production systems.
• Experience with Google Cloud Platform or another major cloud provider.
• Hands-on experience with several of the following: vulnerability scanning, EDR, MDM, logging and monitoring, network security, and identity and access management.
• Experience with Django or web application development is a plus.
• Experience remediating vulnerabilities is a plus.
• Experience in healthcare or another regulated industry is a plus.

Compensation & Location

• Base Salary: $110,000 – $140,000 plus equity.
• Location: This role requires you to live and work in the United States. We are unable to support work from outside the US, including working while traveling internationally.