[Hiring] Principal Security Engineer @Imagine Pediatrics

Role Description

As Principal Security Engineer with Imagine Pediatrics, you will set the technical vision for how we protect our systems, our data, and the children and families who trust us with their care. You will serve as a trusted security advisor to the VP, Information Security and work across the business to make secure the default way we build and run technology, partnering closely with Engineering on DevSecOps strategy and architectural improvements. You will stay hands-on with our hardest problems while raising the bar for the security team and the engineers around it.

• Set the technical vision for the security stack, including endpoint, email, data loss prevention, vulnerability management and penetration testing, network, application, and data security, ensuring alignment with business and clinical strategy.
• Define long-term cloud and identity security strategy across Microsoft Azure/EntraID and Amazon Web Services (AWS), including privileged access, phishing-resistant MFA, and governance of non-human identities.
• Lead security architecture review and threat modeling for Care Hub and connected services, including Medplum application-layer controls and data platforms such as Snowflake.
• Define DevSecOps strategy and standardize security gates across the SDLC and CI/CD pipeline.
• Serve as the senior technical escalation point for complex and high-stakes security events.
• Monitor and advise on the evolving threat landscape facing healthcare.
• Ensure the organization can accurately demonstrate its security posture to payors, regulators, auditors, and other third parties.
• Frame ambiguous, high-stakes security questions for the organization and drive them to well-reasoned, defensible answers.
• Ensure precision at the program level by driving guardrails such as automated configuration checks and drift detection.
• Shape the technical sequencing of our multi-year security roadmap and contribute to quarterly engineering planning.
• Explore early-stage ideas and proofs of concept to de-risk future security initiatives.
• Champion thoughtful AI adoption within security to reduce manual effort.
• Partner with engineering, product, IT, and clinical stakeholders to embed security into how we design, build, and operate our digital products.
• Mentor the security engineering team and coach engineers across technology on security craftsmanship.
• Act as a trusted advisor to leadership, advocating for security engineers while aligning security decisions with business priorities.
• Apply professional discretion and judgement when viewing sensitive and personal data or information in the process of conducting work.
• Other duties as assigned.

Qualifications

• Bachelor of Science degree in Computer Science, Information Security, Business, Management, or a related field is desired; advanced degree a plus.
• Relevant license or certification(s): CISSP, CCSP, CISM, GIAC (e.g., GCIH, GCLD, GSEC), AWS Certified Security – Specialty, Microsoft Certified: Cybersecurity Architect Expert preferred.
• 10+ years of experience as a Security Engineer, Principal Security Engineer, Security Architect, or similar role(s), with at least 5 years of experience within the healthcare industry.
• A track record of setting security technical strategy and driving alignment across security, IT, and engineering teams.
• Deep expertise in cloud and identity security architecture across AWS and Microsoft Azure/EntraID.
• Hands-on application and product security experience, including threat modeling, secure SDLC and CI/CD design, and securing healthcare APIs.
• Experience leading detection and response programs, including partnering with MDR providers and leading the technical response to serious security incidents and data breaches.
• Extensive experience translating HITRUST and HIPAA Security Rule requirements into technical controls.
• Experience using Artificial Intelligence (AI) as a transformative technology to enhance and automate security processes.
• Knowledge of IT systems such as AWS, Microsoft Intune, EntraID, CrowdStrike Falcon, GitHub Advanced Security, Snowflake, JAMF, Meraki, and JIRA Service Management.
• Strong collaboration and coaching skills, with demonstrated success developing senior engineers.
• Comfort operating autonomously in ambiguity, exploring early-stage ideas without well-defined requirements.
• Experience working in a fast-paced, hypergrowth, collaborative environment.
• Willingness to participate in an on-call rotation.
• Contributions to the broader security community, such as conference talks, publications, or industry threat intelligence sharing, are a plus.

Benefits

• The role offers a base salary range of $195,000-$225,000 in addition to annual bonus incentive, competitive company benefits package, and eligibility to participate in an employee equity purchase program.
• Competitive medical, dental, and vision insurance.
• Healthcare and Dependent Care FSA; Company-funded HSA.
• 401(k) with 4% match, vested 100% from day one.
• Employer-paid short and long-term disability.
• Life insurance at 1x annual salary.
• 20 days PTO + 10 Company Holidays & 2 Floating Holidays.
• Paid new parent leave.
• Additional benefits to be detailed in offer.