SIGN IN
Senior/Staff Security Engineer jobs in United States
cer-icon
Apply on Employer Site
company-logo

Pomelo Care · 4 days ago

Senior/Staff Security Engineer

Pomelo Care is the leading virtual medical practice for women and children, providing innovative care solutions. The Senior/Staff Security Engineer will be responsible for owning security problems end to end, building secure systems, and partnering with compliance to enhance safety measures across the organization.
Family & CareHealthcareAppsFashionChildrenHealth CareMobile AppsWomen's
badNo H1Bnote
check
Unicorn with $1.7B valuation

Responsibilities

Own security problems end to end: navigate ambiguity to decide what matters, build it, ship it independently
Find the real risks and build the most direct controls that take them off the table
Build secure-by-default libraries, guardrails, and tooling so dozens of engineers can move fast without footguns
Define and implement strict least-privilege guardrails across all services to safeguard sensitive patient information and health metrics
Harden developer machines to minimize the risk of supply chain attacks and Whatever Comes Next from AI
Partner with compliance to turn control objectives into real controls, and help focus effort on the requirements that genuinely reduce risk and unlock new commercial opportunities (HITRUST, health plan requirements, etc.)

Qualification

KotlinJavaPythonGoC#Threat modelingIdentity and authentication flowsOWASP Top 10Cloud securitySupply chain securityHIPAAHITRUSTGoogle Cloud PlatformSecure-by-default tooling

Required

You have a strong track record of making organizations measurably safer. That track record is risks you've closed, not tickets you've opened
You can tell signal from noise, and you spend your time on the risks that actually move the needle
You're a builder first: 5+ years of software engineering with production-grade code under your belt (Kotlin, Java, Python, Go, C# or similar)
You have real security depth — threat modeling, identity and auth flows, the OWASP Top 10, cloud and supply-chain security
When something's wrong, your instinct is to understand the actual threat and build the most direct fix — not to go shopping for a product that claims to handle it
You're looking for room to own more over time — and you're the type to take it, not wait for it

Preferred

Have built in healthcare and understand HIPAA and HITRUST — and how to satisfy them without drowning engineering in process
Have experience with Google Cloud Platform and a modern product stack
Have built internal developer platforms or secure-by-default tooling that other engineers actually adopted
Have worked in a fast-paced, product-oriented startup

Benefits

Comprehensive Health, Dental, and Vision coverage for employees and their families
High deductible Health Plans with Health Savings Account (HSA) options
Flexible Spending Account (FSA)
Equity grant participation
401(k) program
Competitive vacation policy
16 weeks paid parental leave
Fully remote work flexibility (within the US)

Company

Pomelo Care

twitterlinkedincrunchbase
company-logo
Pomelo Care is a health technology company that develops evidence-based healthcare solutions for women and children.

Funding

Current Stage
Growth Stage
Total Funding
$178.96M
Key Investors
StripesAndreessen Horowitz,First Round Capital
2026-01-08Series C· $92M
2024-06-20Series B· $46M
2023-06-08Series A· $33M

Leadership Team

leader-logo
Marta Bralic Kerns
Founder & CEO
linkedin
Company data provided by crunchbase