Staff Product Security Engineer
Primary stack
Nice to have's
Job description
About the Position
Staff Product Security Engineer
We’re doxy.me (doc-see-me), the world's most loved telemedicine solution, and we're on a mission to connect the world to the future of healthcare. We believe that cost and complexity should never be a barrier to telemedicine. That’s why we created a simple, free, and secure telemedicine platform. Since 2013, we’ve grown to more than 1 million healthcare providers from 180+ countries who have clocked over 8 billion minutes of telemedicine sessions to date.
Our goal is to deliver the future of healthcare to every patient and healthcare professional on earth. Help us get there by joining our team of innovators, dreamers, and doers.
We’re a remote-first company with regional hubs for in-person collaboration (Austin, TX, Boston, MA, Charleston, SC, Salt Lake City, UT & London, UK).
Responsibilities
- Provide security leadership and guidance within our product engineering teams through developer-led threat modeling and education on security and privacy best practices that prevent the authoring of vulnerabilities.
- Coordinate security requirements and standards throughout the product life cycle by working closely with product engineering to manage the vulnerabilities, cryptography, security monitoring, and risk management controls within our application-based products.
- Participate in the development of Doxy.me’s DevSecOps security strategy and posture by designing, advocating and helping build secure-by-default CI/CD pipelines and processes.
- Develop engineering reference implementations on topics of security patterns and security guardrails and how to implement these into software frameworks and the technology stack. Support and implement security technology and security control design proof of concepts and implementations.
- Be a pioneering member of the Doxy.me Information Security Team; liaise with Product and Engineering teams to ensure all product business cases include functional security specs to ensure compliance with information security standards.
- Track trends against various metrics that capture the risks, threats, and vulnerabilities within the product environment then prioritise and implement remediation activities for application flaws.
Requirements
- A Bachelor's degree in computer science, programming, or related field and or equivalent job experience in lieu of a degree.
- Experience working with remote, globally distributed teams.
- Experience working in organisations that develop software and/or operate managed infrastructure and technology services for their own customers.
- Core Skills:
- AWS platforms or services (also consider equivalent experience in Azure or GCP).
- Kubernetes and container infrastructure.
- Secure development and application of IAC solutions (Terraform, Helm).
- Experience with DevOps tools and processes, such as continuous integration and continuous deployment (CI/CD).
- Experience with security testing tools, such as static Code analysis and dynamic Application security testing (DAST).
- Strong understanding of OWASP Top 10, application security vulnerabilities and web security testing methodologies.
- Understanding of secure coding practices for compliance requirements within SOC2, ISO, HIPAA, HITRUST, etc.
- Able to effectively give, receive, and respond to feedback.
- Ability to educate company employees about security measures.
We Offer
- Competitive salary.
- Unlimited PTO.
- Private medical, optical and dental healthcare through AXA.
- 5% matched company pension.
- Remote working - we have recently secured a small flexible office workspace in London Liverpool Street (here). Our current expectations are for teams to meet once per month in office; we would still anticipate a remote dominant environment going forward.
- Company equipment (inc. latest laptop) + £500 spending allowance on equipment you can keep.
About the Company
We’re doxy.me (doc-see-me), the world's most loved telemedicine solution, and we're on a mission to connect the world to the future of healthcare. We believe that cost and complexity should never be a barrier to telemedicine. That’s why we created a simple, free, and secure telemedicine platform. Since 2013, we’ve grown to more than 1 million healthcare providers from 180+ countries who have clocked over 8 billion minutes of telemedicine sessions to date.
Interview Process
- 1st stage - Chat with our internal recruiter.
- 2nd stage - Hiring Manager interview.
- 3rd stage - Team Based interview.
- 4th stage - Technical interview/test.
- 5th stage - Meet with our VP of Engineering.
Additional Information
- Doxy.me tech stack:
- Frontend: React, TypeScript, Playwright, WebRTC, Next.js, Nx.dev.
- Backend: Nodejs, TypeScript, Jest, NestJS, Nx.dev.
- Cloud: AWS.
- 3rd party: Vonage, Segment, Twilio, Stripe.
- Our team: technologists, academics, researchers, and innovators from all over the world. English is the language used in all internal communication.
- To ensure HIPAA compliance we perform background checks after extending a job offer.
Location: London (Remote)
Department: Technology
Employment Type: Full-Time
Minimum Experience: Experienced
© Doxy.me. This job description was sourced from the employer's public career page. TheJob is not the employer — we index the posting and route candidates to the source. All content rights and hiring decisions belong to the employer.
Telemedicine will change the world by making it easier and more affordable for healthcare providers to care for their patients anywhere, including rural and underserved areas. We believe everyone should have access to care through telemedicine.We are a technology company that wants to make the world a better place through telemedicine, enabling health care providers to conduct secure video visits with their patients. Soon we will have a million users spanning the globe who then visit with tens of millions of patients. We have hubs in Charleston SC, Salt Lake City UT, Rochester NY, Kiev, and London. We’re entrepreneurial, dedicated, and community-minded in spirit. We want to deliver the best possible telemedicine experience for our users and their patient population.doxy.me/en/careersBy makingDoxy.mesimple and free, no longer is cost or complexity a barrier to telemedicine. Now any healthcare provider can provide care to their patients outside of the clinical setting.Doxy.meis designed for healthcareBy incorporating standard clinical workflows such as patient check-in and waiting room into the design ofDoxy.me, healthcare providers and their patients experience a familiar and natural visit.Doxy.meis simpleAll the patient needs to start a telemedicine visit is a web link to the doctor’sDoxy.meroom using a standard computer orDoxy.meapp on a mobile device. No special hardware or software are necessary.Doxy.meis freeBy makingDoxy.mefree, we support our mission to make telemedicine available to all. Now healthcare providers can utilize telemedicine at no additional cost to their practice. We also offer a licensed version ofDoxy.mefor additional features or custom branding.Doxy.meis secureSecure data transmission and patient privacy is a top priority. We utilize state-of-the-art security and encryption protocols, makingDoxy.mecompliant with HIPAA and HITECH requirements.Telemedicine should complement, not replace, traditional care deliveryA strong doctor-patient relationship is the foundation for high-quality patient care and reducing health care costs.Doxy.meprovides a simple and convenient way for healthcare providers to meet with their patients remotely, improving the health care experience.NowDoxy.mecounts700,000 users,5MM minutes per monthand2.000.000 video sessions per week, with numbers doubling every year. Our target is to become one of the largest telemedicine providers in the United States.We are building a new development team to innovate new features and grow globally.To learn more about us, please watch these videos:What is Doxy. me ?youtu.be/1K4NAldaflUCome work with our team in Ukraine!youtu.be/SY46f_2cQYs