Apply on Employer Site

Cedar · 5 hours ago

Product Security Engineer

USA

Full-time

Hybrid

Mid Level

$157K/yr - $185K/yr

Cedar is a healthcare technology company focused on making healthcare more affordable and accessible. They are seeking a Product Security Engineer who will build security tooling, architect solutions for scale, and act as a trusted advisor to development teams to enhance security without hindering progress.

BillingFinTechHealth CareMedicalPayments

Growth Opportunities

No H1B

Responsibilities

Build Security Tooling: Shift into a development role to architect robust tools in Terraform, Bash, Go, or Python. You’ll use gRPC, GraphQL, and HTTP to build automation that eliminates manual security toil and developer pain

Architect for Scale: Grab pairing time with product engineers to co-design features across Cedar. You will help bake security in at the design phase, not bolt it on at the end

Pave the Road: Review Infrastructure-as-Code (Terraform) and IAM roles, not just to find flaws, but to offer code-ready improvements that educate developers and streamline future deployments

Advise, Don't Block: Serve as a trusted advisor. When you find a vulnerability, you don’t just report it—you help scope the fix based on a pragmatic understanding of the risk and the business context

Qualification

PythonGoTerraformAWSGRPCGraphQLBashIAMContainerizationSoft Skills

Required

Substantial experience in software development and are comfortable writing production-ready code (we use Python and Go, but we welcome all backgrounds)

Deep familiarity with AWS infrastructure best practices, IAM, and containerization

Ability to weigh security risks against business goals and communicate trade-offs effectively to non-security stakeholders

Proactive in looking for patterns in vulnerabilities and building systemic fixes or libraries to prevent entire classes of bugs

Collaborative approach to working with software developers

Preferred

Experience creating developer-focused security libraries or CLI tools

Familiarity with HIPAA, PCI, or securing fintech/payment data

Participation in CTFs, bug bounties, or open-source security contributions

Benefits

Unlimited PTO for vacation, sick and mental health days

16 weeks paid parental leave with health benefits for all parents, plus flexible re-entry schedules for returning to work

Diversity initiatives that encourage Cedarians to bring their whole selves to work, including three employee resource groups: be@cedar (for BIPOC-identifying Cedarians and their allies), Pridecones (for LGBTQIA+ Cedarians and their allies) and Cedar Women+ (for female-identifying Cedarians)

Competitive pay, equity (for qualifying roles), and health benefits, including fertility & adoption assistance, that start on the first of the month following your start date (or on your start date if your start date coincides with the first of the month)

Cedar matches 100% of your 401(k) contributions, up to 3% of your annual compensation

Access to hands-on mentorship, employee and management coaching, and a team discretionary budget for learning and development resources to help you grow both professionally and personally