Security Engineer

📋 Job Overview

Blueberry's Mission: Our mission is to turn every family’s living room into their own personal pediatric urgent care. We combine home exam kits, concierge-like access, and AI-enabled Pediatricians to provide affordable and near-instant clinic-level care, 24/7. We believe every child deserves access to top-quality healthcare. We’ve proven that by drastically improving access and turning healthcare into a consumer-grade experience, we drive better health outcomes for children and families while dramatically reducing medical costs for parents and health plans (up to 50% reduction in ED costs). We are a mission and values driven company.

🏢 About Blueberry Pediatrics

Blueberry Pediatrics is transforming pediatric healthcare by bringing clinic-level care into patients' homes. We leverage technology including home exam kits, AI-enabled pediatricians, and concierge-like access to provide affordable, high-quality care. Our model has demonstrated significant improvements in health outcomes and cost reductions for families and health plans.

🎯 The Role

We're hiring a Security Engineer to run Blueberry's day-to-day security operations. Reporting to the Head of Security, you'll find and fix vulnerabilities across our Google Cloud Platform environment and Python/Django applications, and manage the tools and controls that protect our devices, network, and accounts. Work in our codebase also offers a path into application security.

✅ Key Responsibilities

• Vulnerability management. Scan and monitor our GCP environment, self-hosted services, and dependencies, prioritize by risk, and track each issue to resolution.
• Remediation. Resolve vulnerabilities directly wherever you can, and partner with engineering on larger fixes.
• Detection and incident readiness. Maintain security logging, monitoring, and alerting, support incident investigations, and regularly test backups and recovery.
• Endpoint security. Deploy and manage EDR and MDM across company devices.
• Network security. Manage firewall and egress rules and network segmentation.
• Access management. Run access reviews, offboarding, and credential rotations.
• IT administration. Set up accounts and devices for new hires, administer our SaaS tools, and support teammates with device and account issues.

📌 Required Qualifications

• 2+ years in security, cloud, systems administration, DevOps, or software engineering.
• Proficiency in Python and experience working in a production codebase.
• Strong Linux fundamentals, including patching and maintaining production systems.
• Experience with Google Cloud Platform or another major cloud provider.
• Hands-on experience with several of the following: vulnerability scanning, EDR, MDM, logging and monitoring, network security, and identity and access management. We'll support you in learning the rest.

⭐ Desirable Experience

• Experience with Django or web application development is a plus.
• Experience remediating vulnerabilities is a plus.
• Experience in healthcare or another regulated industry is a plus.

🎁 Benefits

Expected compensation for this role: Base salary between $110,000 - $140,000 depending on location and experience. The role will also include equity.

🛂 Visa & Eligibility

This role requires you to live and work in the United States. Because Blueberry is a medical practice, we are unable to support work from outside the US, including working while traveling internationally.