What You’ll Do

• Build Security Guardrails: Build security protections into our systems to ensure a secure by default posture.
• Collaborate with Engineering Teams: Participate in design reviews and threat modeling sessions to identify potential security flaws early in the development process, and validate the security of new features and services during rollout ensuring security remains at the forefront of all initiatives.
• Implement & Navigate Compliance Rituals: Understand, oversee, and drive the rituals associated with HIPAA, SOC2, SOC1, PCI and HITRUST to ensure that we remain compliant and informed.
• Vulnerability Management: Regularly audit our platforms and tech stack for vulnerabilities, ensuring that vulnerabilities are identified and addressed in a timely manner.
• Manage Third-party Relationships: Coordinate with vendors for penetration testing and other security services, ensuring that our platforms undergo regular scrutiny and remain fortified, review vendor security prior to integration .

Who You Are

• You have 6+ years of experience in the security domain, with a proven track record of hands-on involvement in complex projects.
• Your expertise isn't just theoretical. You know how to "talk the talk", especially when it comes to the rituals and routines of security compliance.
• With strong knowledge of HIPAA, you're no stranger to the delicate information we handle.
• You are adaptable and flexible, always ready to engage with security challenges at both enterprise and client levels.
• You write code to automate security, you possess the ability to read, understand, and audit systems, networks, and IT setups to ensure airtight security.

Our values

We spend at least as much time with our coworkers as we do with our closest friends + family - if we intend to do the most important + challenging work of our lives, it’s important that these folks energize us, support us, inspire us, and push us to do our best work. This is what you can expect of your teammates at Candid (in no particular order):

• We put our customers first
• We take care of each other and ourselves
• We anchor on outcomes and work relentlessly and creatively to achieve them
• We collectively prioritize building a diverse and inclusive workspace
• We believe humility is our greatest strength
• We are candid, kind, and committed
• We strive to be the most prepared person in the room
• We are truth seekers

A meeting lands on your calendar

If they’re a yes, I book the chat. You show up — that’s the whole job-hunt.