About the Company
At Rezilient, we’re redefining what primary care looks like, making it more accessible, seamless, and patient-centered than ever before. Through our innovative CloudClinic model, we combine virtual provider visits with smart, tech-enabled infrastructure to deliver timely, personalized care. By removing traditional barriers to access and continuously expanding our specialty offerings, we’re building a healthcare experience that’s as convenient as it is comprehensive.
About the Role
Rezilient is seeking a Senior Security Engineer to serve as a hands-on, senior individual contributor supporting our information security programs. This role is responsible for protecting the systems, data, and infrastructure that power Rezilient’s CloudClinic model, with a particular focus on safeguarding protected health information (PHI) and personally identifiable information (PII) across our cloud platform, clinical environments, and corporate systems.
You will design, build, and operate the technical security controls that keep Rezilient secure, from cloud and application security to identity and access management, endpoint protection, detection, and incident response. Working closely with Engineering, Product, IT, Clinical Operations, and our Security & Compliance team, you will embed security into how we build and run our platform, and provide the technical evidence and expertise that support frameworks such as SOC 2, HIPAA/HITECH, and HITRUST.
This is a senior IC role for an engineer who can move comfortably between architecture and execution. The ideal candidate brings deep technical expertise, sound judgment, and the ability to translate security needs into practical solutions that enable a fast-moving healthcare technology company to grow safely.
Key Responsibilities
Cloud & Infrastructure Security
Design, implement, and maintain security controls across Rezilient’s cloud infrastructure, including network security, encryption, secrets management, logging, and configuration hardening.
Build and manage security guardrails using infrastructure as code, cloud-native security tools, and automated policy enforcement.
Continuously assess cloud environments for misconfigurations, excessive permissions, and exposure risks, and drive remediation with Engineering.
Ensure PHI and PII are protected at rest and in transit, with appropriate data classification, access restrictions, and retention controls.
Application & Product Security
Partner with Product and Engineering to embed security into the software development lifecycle, from design through release.
Lead threat modeling and security design reviews for new features, integrations, infrastructure, and architecture decisions.
Own application security tooling and processes, including static and dynamic analysis, dependency and container scanning, and secure code review.
Establish secure development standards and coach engineers on secure coding practices and common vulnerability classes.
Assess the security of third-party integrations, APIs, and EHR and partner data exchanges that handle patient data.
Identity, Access & Endpoint Security
Partner with IT to design and enforce identity and access management controls, including SSO, MFA, role-based access, least privilege, and access reviews.
Detection, Response & Vulnerability Management
Build and tune security monitoring, logging, and alerting to detect suspicious activity across cloud, application, identity, and endpoint layers.
Serve as a technical lead during security incidents, coordinating investigation, containment, eradication, recovery, and post-incident review.
Develop and maintain incident response runbooks and lead tabletop exercises with cross-functional teams.
Own the vulnerability management program, including scanning, prioritization, remediation tracking, and coordination of penetration tests.
Monitor the threat landscape relevant to healthcare and cloud environments and proactively adapt defenses.
Security…