Description:

Solace is a healthcare advocacy marketplace that connects patients and families to experts who help them understand and take charge of their personal health.
The company is transforming healthcare in the U.S. by addressing the complexity of the system, which leaves 88% of U.S. adults lacking the necessary health literacy.
Solace uses proprietary technology to match patients with experienced advocates, helping individuals and families make informed decisions that lead to better health outcomes.
The company is a Series B startup founded in 2022 and is backed by several venture capital firms.
The Lead Security Engineer will be the first security engineering hire and will build out the security department from scratch.
This role involves securing patient-facing and internal web applications, protecting sensitive health data, and shaping the security posture of the platform.
Responsibilities include owning web application security, promoting a security-first culture, analyzing features for security risks, conducting threat modeling and vulnerability assessments, and ensuring compliance with HIPAA and SOC 2.
The Lead Security Engineer will also monitor threats, lead investigations of security incidents, and provide training and mentorship on secure development practices.

Requirements:

Candidates must have experience working in a start-up environment.
A minimum of 8 years of experience in web application security or related engineering roles is required.
Proficiency with secure web development and auditing practices, including input validation and encryption, is necessary.
Experience with threat modeling, vulnerability scanning tools, and manual security testing is essential.
Familiarity with regulatory and compliance frameworks is required.
Experience in healthcare or other regulated industries, along with knowledge of implementing HIPAA compliant software, is preferred.

The position offers the opportunity to be a critical hire in a growing startup, shaping the security practices of a platform that impacts patients' lives.
Employees will work in a fully remote environment with a lean team distributed across the U.S.
The role provides the chance to promote a security-first culture and influence the security posture of the organization.
Candidates will have the opportunity to lead security initiatives and work cross-functionally with various teams.