Principal Security Engineer

About the role

You will be the foundational technical pillar for security at Candid Health, serving as the first Principal Security Engineer. In this high‑influence individual contributor role you will partner with engineering and product leadership to embed security into rapid feature delivery while protecting customer and patient data.

Key responsibilities

• Serve as the ultimate technical authority for security, mentor engineers and scale a world‑class security culture.
• Lead the design and implementation of an enterprise‑grade security roadmap, transitioning from a foundational posture to a resilient architecture.
• Translate regulatory frameworks (HIPAA, SOC2, SOC1, PCI, HITRUST) into concrete engineering requirements and automate compliance.
• Embed a “secure‑by‑design” mindset through threat modeling, secure coding practices and cross‑functional collaboration.
• Oversee third‑party penetration testing, vendor assessments and continuous vulnerability scanning of production environments.

Required profile

• 10+ years of security engineering experience in both startup and scaled enterprise environments.
• Proven track record of architecting secure systems and delivering security outcomes at scale.
• Deep understanding of regulated healthcare data and associated compliance frameworks.
• Ability to write secure infrastructure‑as‑code, perform threat modeling and communicate with enterprise customers.
• Strong influence and mentorship skills to elevate security culture across the organization.

What we offer

• Competitive base salary ranging from $240,000 to $310,000 USD per year.
• Equity participation and comprehensive employee benefits as part of total compensation.