Apply on Employer Site

SuperDial · 1 month ago

Senior Platform Security Engineer

Burlingame, CA

Full-time

Hybrid

Senior Level

$145K/yr - $240K/yr

5+ years exp

SuperDial is building the automation engine that fixes revenue cycle management, and they are seeking a Senior Platform Security Engineer to own the security architecture and operational safeguards of their platform. This role involves designing and implementing security controls across various systems to ensure compliance and resilience.

Computer Software

Responsibilities

Design and implement platform-wide security architecture across cloud infrastructure, application services, data pipelines, and ML environments

Lead threat modeling, security design reviews, and risk assessments for new products, features, and integrations

Define and enforce secure coding practices, CI/CD controls, and secrets management

Build and maintain identity, access management, and least-privilege frameworks across engineering systems

Develop monitoring, alerting, and anomaly detection systems for security-critical events across infrastructure and application layers

Build incident response workflows, playbooks, and runbooks to ensure rapid containment and remediation

Implement log ingestion and tooling for SIEM, endpoint security, and intrusion detection

Own data protection strategies including encryption, tokenization, key management, and secure data lifecycle controls

Partner with compliance on HIPAA, SOC 2, and enterprise security assessments

Build audit-ready controls and documentation for customer security reviews

Establish vulnerability scanning, penetration testing programs, and patch management workflows

Drive prioritization and resolution of vulnerabilities across infrastructure and application dependencies

Evaluate and onboard third-party security tooling as needed

Lead responses to customer security questionnaires, architecture deep dives, and due diligence requests

Collaborate with engineering to build security guarantees into product features, SLAs, and deployment patterns

Qualification

Cloud infrastructure AWSCloud infrastructure GCPSecurity architectureThreat modelingVulnerability managementCI/CD pipelinesIdentity frameworksSecrets managementSIEM systemsClear communicatorHands-on builder