Head of Security Engineering

Candid Health
San Francisco, Denver, New York
Workplace: OnsiteFull timeUSD 240,000 - 310,000 annuallyFunction: CybersecurityExperience: 10+ yearsSkills: ["Leadership","Risk management","Compliance","Security architecture","Threat management"]

Lead and scale the security engineering function, building a team and security program at a startup-scale healthcare platform. You’ll own risk, compliance, product security, and vendor assessments, drive a security roadmap, advocate for HIPAA-aligned controls, and partner with executive leadership across engineering, product, and legal to keep data safe as the company grows.

Loading

Loading job details...

Preparing the role view and application actions.

FursaFursa
Candid Health
Candid Health
3 months ago

Head of Security Engineering

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI
Last checked: 5 hours agoStatus: Live

Job Summary

Lead and scale the security engineering function, building a team and security program at a startup-scale healthcare platform. You’ll own risk, compliance, product security, and vendor assessments, drive a security roadmap, advocate for HIPAA-aligned controls, and partner with executive leadership across engineering, product, and legal to keep data safe as the company grows.
Location: San Francisco, Denver, New York
Workplace: Onsite
Employment Type: Full time
Job Function: Cybersecurity
Seniority: Director level

Key Responsibilities

  • •Scale and lead a Security Engineering Organization by interviewing, hiring, and managing a team accountable for risk, compliance, threat management, and product/app security.
  • •Build and own the security roadmap, evolving from foundational posture to an enterprise-grade security program.
  • •Drive security prioritization with leadership, ranking risks and advising mitigations in partnership with executives.
  • •Lead trust and transparency efforts, managing HIPAA, SOC2, SOC1, PCI, and HITRUST rituals and audits for enterprise customers.
  • •Act as a security evangelist and culture carrier, educating ~200 employees and partnering with virtually every team to promote a security-first mindset.

Pay and Benefits

Salary: USD 240,000 - 310,000 annually

Key Requirements

  • •10+ years of experience in security engineering, with a proven track record of building and leading teams that own complex matrices of technical surface area in startup and scaled environments.
  • •Experience driving security compliance programs and rituals (HIPAA, SOC2, SOC1, PCI, HITRUST) and engaging with enterprise customers.
  • •Strong ability to read, understand, and audit systems, networks, and IT setups, and to mentor others in security practices.
  • •Proven track record of prioritizing security initiatives and communicating risk-based decisions to executive leadership.
  • •Adaptable and collaborative, able to work across engineering, product, and legal teams.
Experience:10+ years
Skills:LeadershipRisk managementComplianceSecurity architectureThreat management
Languages:English
Tech Stack:HIPAASOC2SOC1PCIHITRUSTPenetration testing

Eligibility

Visa:US citizen/visa only
Work Authorization:Authorization required. Sponsorship not provided.

Company Brief

Candid Health
Candid Health is a virtual-first healthcare provider offering telehealth-based primary and urgent care services, connecting patients with clinicians for accessible preventive, chronic, and on-demand care while coordinating in-person services when needed.
Industry: Healthcare Providers
Website