Senior Security Software Engineer

House Rx is a healthcare technology company transforming how specialty medications are managed and delivered within physician practices. They are seeking a Senior Security Software Engineer to build, review, and harden security-sensitive software and infrastructure, focusing on secure code review and cloud/network security coverage.

Responsibilities:

• Build and harden internal security-sensitive tooling alongside engineering and operations teams
• Dig deeply into engineers' code and review security-sensitive pull requests, especially for systems that may touch PHI
• Design and enforce security gates and guardrails across the SDLC, including automated CI/CD checks, pre-merge review requirements, and policy-as-code, so insecure or AI-generated code is caught before it ships
• Support application security reviews across platform and internal tooling
• Review security-relevant Terraform, cloud, firewall, routing, VPN, IPSec, VPC, and clinic connectivity changes
• Improve visibility into our security posture across AWS, GCP, clinic networks, and internal applications
• Help prepare engineering teams for HITRUST and customer security expectations

Requirements:

• Passion for AI safety and the role security engineering plays in building trustworthy AI systems
• At least 6+ years of software engineering experience implementing and maintaining security-relevant systems in production, including reviewing and raising the bar on other engineers' code
• Strong programming skills in Python or at least one systems language
• Experience contributing to cloud security controls
• Strong understanding of web application security and secure SDLC practices
• Familiarity with AWS and/or GCP
• Experience with Terraform or infrastructure-as-code
• A track record of reviewing PRs and giving clear, practical, and influential security feedback that other engineers act on
• Working knowledge of authentication, authorization, logging, secrets management, and data protection
• Strong judgment around sensitive data, especially in healthcare or regulated environments
• Healthcare, HIPAA, HITRUST, or SOC 2 experience
• Experience securing AI-assisted development workflows
• Experience with Python, TypeScript, Node.js, or similar stacks
• Experience with Auth0, Okta, Kubernetes, EKS, RDS, or private cloud networking
• Experience with SAST, SCA, secret scanning, IaC scanning, or software supply chain security