Staff Security Engineer

Job Overview

As a Staff Security Engineer at Pomelo Care, you will be part of the engineering team that powers their virtual care platform. Your primary focus will be on security, ensuring the safety and integrity of patient data.

Responsibilities

• Own security problems end-to-end: navigate ambiguity to decide what matters, build it, and ship it independently.
• Identify real risks and build direct controls to mitigate them.
• Develop secure-by-default libraries, guardrails, and tooling for dozens of engineers.
• Implement strict least-privilege guardrails across all services to safeguard sensitive patient information.
• Harden developer machines to minimize the risk of supply chain attacks.
• Collaborate with compliance to turn control objectives into real controls.

Requirements

• Strong track record of making organizations measurably safer.
• Ability to distinguish signal from noise and focus on significant risks.
• 7+ years of software engineering experience with production-grade code.
• Real security depth, including threat modeling, identity and auth flows, and cloud security.
• Instinct to understand threats and build direct fixes.
• Desire to own more responsibilities over time.

Nice to Have

• Experience in healthcare, understanding HIPAA and HITRUST.
• Familiarity with Google Cloud Platform and modern product stacks.
• Background in building internal developer platforms or secure-by-default tooling.
• Experience in fast-paced, product-oriented startups.

Benefits and Perks

• Comprehensive health, dental, and vision coverage.
• High deductible health plans with HSA options.
• Flexible spending account (FSA).
• Equity grant participation.
• 401(k) program.
• Competitive vacation policy.
• 16 weeks paid parental leave.
• Fully remote work flexibility within the US.

Compensation

The expected base salary range for this role is $220,000-$260,000. The role is also eligible for equity, giving you an ownership stake in Pomelo Care's mission. Actual compensation may vary based on relevant experience, skills, competencies, and certifications.