Product Security Engineer

Modern Health
United States
Workplace: RemoteFull timeUSD 101,405 - 140,400 annuallyFunction: CybersecurityExperience: 2-4 yearsSkills: ["Ownership","Independent execution","Written and verbal communication","Collaboration","Bias towards action"]

Own and strengthen product security across Modern Health’s web and mobile applications. The role analyzes vulnerabilities, threat landscapes, and remediations, integrates secure practices into the SDLC, and improves security/compliance posture through standards, audits, and security tooling. You’ll lead secure coding guidance, partner on threat modeling and penetration testing, and collaborate with Engineering, Product, DevOps, and Infrastructure to secure AWS, CI/CD, and cloud-native controls.

Loading

Loading job details...

Preparing the role view and application actions.

FursaFursa
Modern Health
Modern Health
11 hours ago

Product Security Engineer

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI
Last checked: 11 hours agoStatus: Live
Reposted: similar role first listed 6 months ago

Job Summary

Own and strengthen product security across Modern Health’s web and mobile applications. The role analyzes vulnerabilities, threat landscapes, and remediations, integrates secure practices into the SDLC, and improves security/compliance posture through standards, audits, and security tooling. You’ll lead secure coding guidance, partner on threat modeling and penetration testing, and collaborate with Engineering, Product, DevOps, and Infrastructure to secure AWS, CI/CD, and cloud-native controls.
Location: United States
Workplace: Remote
Employment Type: Full time
Job Function: Cybersecurity
Seniority: Mid level

Key Responsibilities

  • •Analyze web and mobile security vulnerabilities, determine risk, and drive remediations with engineering teams.
  • •Research and report product threats and emerging vulnerabilities, and apply mitigation techniques.
  • •Integrate security into the SDLC by championing secure development practices and agile delivery.
  • •Implement and advocate for product security standards, conduct security testing/audits, and guide teams on secure coding standards.
  • •Deploy and manage security tooling (e.g., SAST/DAST and Hashicorp Vault), conduct security reviews, and support penetration testing and threat modeling.

Pay and Benefits

Salary: USD 101,405 - 140,400 annually
Equity and Bonus:Equity
Perks:Health InsuranceDentalVisionDisabilityLife InsuranceParental LeaveLearning Budget401kHome Office

Key Requirements

  • •2-4 years of experience in product/application security or 1-3 years in security-focused software engineering.
  • •Hands-on experience with vulnerability management, secure code review, and threat modeling using industry-standard application/product security tools.
  • •Experience with at least one scripting language (Python and/or Bash preferred).
  • •Experience integrating security into agile product delivery and providing actionable security feedback to software engineers.
  • •Experience assessing and improving AWS cloud posture (e.g., IAM/access reviews, network/environment segmentation, centralized logging, detection, secure CI/CD or Terraform controls).
Experience:2-4 yearsProduct/app securityAWS cloudHealth techSaaS
Skills:OwnershipIndependent executionWritten and verbal communicationCollaborationBias towards action
Languages:English
Tech Stack:AWSECSGitLabCI/CDPythonDjangoFlaskAiohttpPostgreSQLRedisDatadogSentryTerraformPackerSASTDASTHashicorp Vault

Eligibility

Work Authorization:Authorization required. Sponsorship not provided.

Company Brief

Modern Health
Provides a mental health and well-being platform for employers, combining coaching, therapy, and self-guided digital resources to support employee mental health and improve workplace outcomes.
Industry: Mental Health
Company Size: Large (251 to 1,000 employees)
Growth: Scaleup
Funding: Series C
Headquarters: San Francisco, United States
Founded: 2017
WebsiteLinkedIn