- 6–8+ years in corporate security, IT security, security engineering or security operations, including 4+ years of hands-on engineering of corporate controls at a cloud-native or SaaS company. This is an individual contributor role, so people-management experience isn’t required.
- Deep, hands-on experience with an enterprise identity provider and its protocols (SAML, OIDC, OAuth 2.0, SCIM), including sign-on and session policies, device assurance or conditional access, and lifecycle automation.
- Hands-on experience with device trust, MDM and EDR across macOS and Windows, including rolling out posture-based access without breaking productivity.
- Experience hardening productivity suites and major SaaS platforms: admin roles, export and API permissions, OAuth app governance and audit logging.
- Experience defining detection use cases and writing or tuning detection rules alongside a security operations team.
- You have served as incident commander or lead responder on real security incidents, made containment decisions under pressure, and run post-incident reviews that led to real change.
- Production-quality scripting in Python or similar, and experience integrating security tools through APIs.
- Experience producing control evidence for SOC 2 and other audits.
- Clear writing and executive communication. You can translate technical risk into business impact and decisions, and you get work done through influence across IT, Engineering, Security, Legal, People and Procurement. You’ve partnered with Legal and Compliance on investigations, audits or regulatory reviews.
Expectations of AI use in this role (required)
- Use AI in your own work for triage, investigation, documentation and automation, with clear human accountability for every decision.
Additional skills and experience we’d prioritize (nice to have)…
- Experience in healthcare, life sciences or another environment handling regulated or sensitive data.
- Experience at a high-growth company through Series C–E or pre-IPO stages.
- Identity workflow automation, identity threat detection or device-assurance integrations.
- Experience with SSPM or compliance-automation platforms.
- Insider-risk or DLP programs, or digital forensics.
- Evaluating and implementing enterprise security vendors.
- Certifications such as GCIH or CISSP.
The pay range for each job posting reflects a minimum and maximum range of annual base pay that we reasonably expect to pay for this position within the US. We carefully consider multiple business-related factors when determining compensation, including job-related skills, work experience, geographic work location, relevant training and certifications, business needs and market demands.
The starting annual base pay for this role is listed below. This position may be eligible for performance-based bonuses as determined in the Company’s sole discretion and in accordance with a written agreement or plan. This role may also be eligible for equity awards. In addition, this role is eligible for benefits including, but not limited to, comprehensive health, dental, and vision insurance; flexible time off and holidays; 401(k) with company match; disability insurance and life insurance; and leaves of absence in accordance with applicable state and local laws and regulations and company policy.
San Francisco Bay Area and New York City
$173,000—$215,000 USD
All Other US Locations
$150,000—$185,000 USD
Komodo's AI Standard
At Komodo, we're not just witnessing the AI revolution – we're leading it. This is a pivotal moment in time, where being first to market with AI transforms industries and sets the bar. We've already established industry leadership in leveraging AI to revolutionize healthcare, and we expect every team member to contribute. AI here isn't optional; it's foundational. We expect you to integrate AI into your daily work – from summarizing documents to automating workflows and uncovering insights. This isn't just about efficiency; it's about making every moment more meaningful, building on trust in AI, and driving our collective success.
Join us in shaping the future of healthcare intelligence.
Where You’ll Work
Komodo Health has a hybrid work model with hubs in San Francisco, New York City, and Chicago. Roles vary — some can be performed from anywhere in the country, others are scoped to a specific region, and some are based near one of our hubs. For hub-based Dragons, we're building intentional in-office rhythms alongside the flexibility that's core to how we work. Whatever your setup, expectations will always be clear before you join.