Senior Security Engineer

About the role

candidhealth is rethinking medical billing with data‑driven software to make healthcare payments easier and cheaper. As a Senior Security Engineer you will be the guardian of our platforms, ensuring they are resilient against threats and meet strict compliance standards.

Key responsibilities

• Build security guardrails to enforce a secure‑by‑default posture across all systems.
• Partner with engineering teams during design reviews and threat‑modeling to catch security flaws early.
• Lead compliance initiatives for HIPAA, SOC 2, SOC 1, PCI and HITRUST, keeping the organization audit‑ready.
• Conduct regular vulnerability assessments and drive timely remediation.
• Manage third‑party security relationships, including penetration testing and vendor security reviews.

Required profile

• 4+ years of hands‑on security experience delivering complex projects.
• Deep familiarity with security compliance rituals and frameworks.
• Strong knowledge of HIPAA and handling sensitive health information.
• Adaptable, able to address security challenges at both enterprise and client levels.
• Proficient in writing code to automate security processes and audit systems.

Required skills

• HIPAA compliance
• SOC 2 compliance
• SOC 1 compliance
• PCI DSS compliance
• HITRUST certification