Product Security Engineer 3
CarePortal · USA
About this role
**Product Security Engineer 3 — Cedar** ## The Mission Cedar is working to make healthcare more affordable and accessible by leveraging data science, smart product design, and personalization. ## The Role Security at Cedar is about building the **“yes”**—making the secure path the easiest path for developers. You’ll be a **developer-first Product Security Engineer** who writes code, builds infrastructure, and ships internal products that help teams deliver high-value features safely without slowing down. You’ll partner with Maker teams to solve **high-risk, high-value workflows** across product, infrastructure, and integrations. ## What You’ll Solve (Example Project) **Problem:** Developers needed to troubleshoot a workflow, but could only reproduce the issue when logs included otherwise access-restricted sensitive data. Logging sensitive data is risky, and the existing approach required tracing identifiers across multiple systems—slow and painful for patients. **Solution:** Built a reusable custom logger that can safely accommodate sensitive data. It can be temporarily enabled and stored/analyzed safely. **Impact:** Partnered with a product team as an early beta tester, increasing developer velocity and improving security posture by reducing the temptation to log sensitive information unsafely. ## What You’ll Do - **Build Security Tooling:** Architect robust tools in **Terraform, Bash, Go, or Python**. Use **gRPC, GraphQL, and HTTP** to automate security work and eliminate manual toil. - **Architect for Scale:** Pair with product engineers to bake security into the design phase. - **Pave the Road:** Review **Infrastructure-as-Code (Terraform)** and **IAM roles**, and provide code-ready improvements that educate developers and streamline deployments. - **Advise, Don’t Block:** Serve as a trusted advisor—help scope fixes based on risk and business context. ## About You - **Developer first:** Strong production engineering experience (Python/Go used, but all backgrounds welcome). - **Pragmatic:** Understand trade-offs; communicate security risk clearly to non-security stakeholders. - **Proactive:** Look for patterns and build systemic fixes (libraries/tools) to prevent classes of bugs. - **Cloud fluent:** Deep familiarity with **AWS**, **IAM**, and containerization. - **Collaborative teacher:** Enable developers; not combative. - **Fluent in AI:** Use AI tools responsibly to improve security research/analysis and help teammates practice responsible usage. ## Bonus Points - Experience building developer-focused security libraries or CLI tools - Familiarity with **HIPAA, PCI**, or securing fintech/payment data - Participation in **CTFs, bug bounties**, or open-source security contributions ## Work Authorization Applicants must be **currently authorized to work in the United States** on a **full-time** basis. ## Compensation & Benefits - **Salary Range:** **$157,250.00 – $198,875.00** (subject to location, experience, and education) - **Equity eligible** - Competitive benefits and wellness package **Additional perks include:** flexibility to work from home or in the office (unless otherwise stated), **Unlimited PTO** for exempt employees, **16 weeks paid parental leave**, diversity initiatives/ERGs, health benefits (including fertility & adoption assistance), **401(k) match (100% up to 3%)**, and mentorship/coaching plus a learning & development budget. ## About Cedar Cedar was co-founded in 2016 after a negative medical billing
Listing freshness
CronJobs last confirmed this listing 1h ago. If its source stops confirming the opening for seven days, this page is removed from active inventory.