Principal Security Engineer

📋 Job Overview

You will be the foundational technical pillar for security at Candid Health. As our first Principal Security Engineer, you won't just be managing a compliance checklist—you will architect, build, and scale the technical systems that protect our customers and their patients. Operating as a high-influence individual contributor, you will partner directly with Engineering and Product leadership to ensure we ship features rapidly while maintaining an ironclad promise of data integrity. This is a role for a heavy-hitting technical leader who wants to set the security blueprint for a fast-growing health-tech platform.

🏢 About Candid Health

Candid Health is a fast-growing health-tech platform focused on protecting sensitive healthcare data. We are seeking a technical leader to establish our security foundation and ensure compliance with rigorous frameworks like HIPAA, SOC2, SOC1, PCI, and HITRUST.

🎯 The Role

You will be the foundational technical pillar for security at Candid Health. As our first Principal Security Engineer, you won't just be managing a compliance checklist—you will architect, build, and scale the technical systems that protect our customers and their patients. Operating as a high-influence individual contributor, you will partner directly with Engineering and Product leadership to ensure we ship features rapidly while maintaining an ironclad promise of data integrity. This is a role for a heavy-hitting technical leader who wants to set the security blueprint for a fast-growing health-tech platform.

✅ Key Responsibilities

• Architect and Guide the Security Landscape: Serve as the ultimate technical authority for security at Candid.
• Design the Enterprise-Grade Roadmap: Lead the technical transition from a foundational security posture to a best-in-class, resilient enterprise architecture.
• Drive Strategy at the Leadership Level: Act as the subject matter expert who translates complex technical risks into business priorities.
• Bake Trust & Compliance into the Architecture: Translate rigorous frameworks like HIPAA, SOC2, SOC1, PCI, and HITRUST into concrete engineering requirements.
• Evangelize a \"Secure-by-Design\" Culture: Level up our 200+ employees through threat modeling, secure coding practices, and cross-functional collaboration.
• Own Vulnerability & Vendor Deep Dives: Oversee third-party penetration testing and ensure continuous scrutiny of our production environments.

📌 Required Qualifications

• An Elite Technical Leader: 10+ years of experience in security engineering with a proven track record of architecting secure systems.
• A Practitioner, Not Just a Theorist: Experience driving security outcomes at scale and balancing pragmatism with defense-in-depth.
• A Security Expert: Deep understanding of sensitive, highly regulated datasets and the challenges of handling protected critical information.
• A Force Multiplier: Ability to code, architect, and influence, comfortable with secure infrastructure-as-code, threat-modeling, and defending Candid's security posture to enterprise customers.

🎁 Benefits

The estimated starting annual salary range for this position is $240,000 - $310,000 USD. Total compensation may also include equity, sales incentives, and employee benefits. Candid Health values the potential upside from equity in our compensation package.

🛂 Visa & Eligibility

No specific visa or eligibility information provided.