We're looking for a Cybersecurity Engineer to own our Platform / Software security at Relu, a company improving dental care globally.
🏢 About Relu
Relu is improving dental care and making higher-quality dentistry accessible to everyone, globally. We're a fast-growing company where your growth goes hand-in-hand with ours.
🎯 The Role
You will build our ISMS from the ground up, get Vanta green across every system, run penetration tests, stand up vulnerability management, harden our AWS and Kubernetes baseline, and write and tabletop-test our incident response playbook.
✅ Key Responsibilities
Build our ISMS from the ground up — scope, risk assessment, Statement of Applicability, and core policies — and lead us through ISO 27001 Stage 1 audit
Get Vanta green across every system, with a live Trust Center that takes manual security questionnaires off sales' plate for good
Run a penetration test and close every critical and high finding before it becomes someone else's problem
Stand up vulnerability management across code, dependencies, containers, and Terraform — with a triaged backlog and fix deadlines that actually get met
Harden our AWS and Kubernetes baseline with least-privilege access, network segmentation, and threat-detection piped straight to on-call
Write and tabletop-test our incident response playbook, GDPR 72-hour breach notification included, and align it with our MDR technical documentation so we run one evidence set — not two
📌 Required Qualifications
2–5 years of hands-on cybersecurity engineering experience, including vulnerability assessment, threat modeling, and incident response
Solid command of AWS security — IAM policies, network segmentation, secrets management
Proficiency with security tooling: SIEM platforms, IDS/IPS, and penetration testing frameworks like Burp Suite or Metasploit
Experience securing software development pipelines (SAST, DAST, dependency scanning) and working within a DevSecOps culture
Working knowledge of compliance frameworks such as ISO 27001, SOC 2, or GDPR — ideally in a SaaS or healthtech context
Ability to write and maintain security policies, runbooks, and incident response playbooks that people actually use
⭐ Desirable Experience
Experience in a regulated industry — healthcare, medtech, or dental — with exposure to HIPAA or MDR requirements
Familiarity with zero-trust architecture and modern identity solutions like Auth0
Hands-on experience with container security (Docker, Kubernetes) and IaC scanning tools like Checkov
Relevant certifications: CEH, OSCP, CISSP, or AWS Security Specialty
🎁 Benefits
A mission that matters: improving dental care and making higher-quality dentistry accessible to everyone, globally
A fast-growing company where your growth goes hand-in-hand with ours — real impact, real ownership, and skills in the technologies of the future
A driven and collaborative team
Fun team culture: after-works, bi-weekly sports, hackathons, retreats
