Product Security Engineer

Who you are

• You’re an application security engineer who prioritizes addressing security challenges with technology, not process
• You love building services and tools that help product and platform engineers build, deploy, and maintain products that help hundreds of millions of people
• You have experience with security code review, threat modeling or security architecture reviews
• You’re proficient in Python, Go, or Kotlin
• Familiarity with HIPAA, PCI, and the unique considerations around securing health and payments data
• Experience creating developer focused security tooling or libraries
• Participation in security capture-the-flag events

What the job involves

• The Product Security team at Cedar combines software development with deep application security expertise in order to help build our patient-focused solutions efficiently and safely
• As a Product Security Engineer at Cedar, you will work with an inquisitive, diverse, and experienced team on a platform that is rapidly scaling. You’ll help solve problems that matter, affecting tens of millions of patients annually
• Our core tenets include using good judgment and having the autonomy to be successful. Your role will be to build secure, supportable secure paths for other engineers to follow and help accelerate Cedar Engineering’s mission
• Whether it’s an improvement on single sign on experience, a smoother UI for credential management, or multi-tenant encrypted vault solutions, Cedar Product Security Engineers build the security tools others need to do their work more safely and more efficiently
• At Cedar, we don’t require experience with particular languages, but deep familiarity with modern and industry-standard technologies, like Python, Go, and Kotlin are a plus
• Create and extend services and tools that help product and platform engineers build, deploy, and maintain Cedar products safely and efficiently
• Serve as a Security Partner for multiple engineering teams across the SSDLC, evangelizing security and helping threat model features, bake security into designs, and review code and implementations
• Contribute to security automation projects, such as static analysis, vulnerability management, and asset inventory

Benefits

• Multiple health / dental / vision insurance options to fit your needs
• Generous compensation package, including equity and 401k program matching 100% of your contributions, up to 3% of your annual compensation
• Unlimited PTO for vacation, sick and mental health days–we encourage everyone to take at least 20 days of vacation per year to ensure dedicated time to spend with loved ones, explore, rest and recharge
• We provide up to $10,000 in reimbursement through Carrot Fertility to support comprehensive, inclusive care for family-forming and reproductive health journeys
• 16 weeks of parental leave for all expecting parents
• Remote-friendly team events
• Location flexibility: you can work from home, in our NYC headquarters, or any combination of the two
• Constant learning and development opportunities
• Resources for mental and physical wellbeing