Security Engineer

Blueberry Pediatrics is hiring a Security Engineer to run day-to-day security operations. The role focuses on identifying and remediating vulnerabilities across its cloud environment and applications, maintaining security controls, and supporting IT administration.

Responsibilities:

• Vulnerability management. Scan and monitor our GCP environment, self-hosted services, and dependencies, prioritize by risk, and track each issue to resolution
• Remediation. Resolve vulnerabilities directly wherever you can, and partner with engineering on larger fixes
• Detection and incident readiness. Maintain security logging, monitoring, and alerting, support incident investigations, and regularly test backups and recovery
• Endpoint security. Deploy and manage EDR and MDM across company devices
• Network security. Manage firewall and egress rules and network segmentation
• Access management. Run access reviews, offboarding, and credential rotations
• IT administration. Set up accounts and devices for new hires, administer our SaaS tools, and support teammates with device and account issues

Requirements:

• 2+ years in security, cloud, systems administration, DevOps, or software engineering
• Proficiency in Python and experience working in a production codebase
• Strong Linux fundamentals, including patching and maintaining production systems
• Experience with Google Cloud Platform or another major cloud provider
• Hands-on experience with several of the following: vulnerability scanning, EDR, MDM, logging and monitoring, network security, and identity and access management. We'll support you in learning the rest
• This role requires you to live and work in the United States
• Experience with Django or web application development is a plus
• Experience remediating vulnerabilities is a plus
• Experience in healthcare or another regulated industry is a plus