Security Engineer

About the role

Blueberry's Mission:

Our mission is to turn every family’s living room into their own personal pediatric urgent care. We combine home exam kits, concierge-like access, and AI-enabled Pediatricians to provide affordable and near-instant clinic-level care, 24/7. We believe every child deserves access to top-quality healthcare.

We’ve proven that by drastically improving access and turning healthcare into a consumer-grade experience, we drive better health outcomes for children and families while dramatically reducing medical costs for parents and health plans (up to 50% reduction in ED costs).

We are a mission and values driven company. You can learn more about our values HERE https://drive.google.com/file/d/1WbORoU9L17875Re3r0psjPcALDGUvDMa/view. 🫐 💙

Note: Beware of Scammers. Blueberry will NEVER ask you to download software/apps or request sensitive personal information like bank accounts or social security numbers. If you received an email requesting this information it is likely a scam. We are only accepting candidates through our job board.

THE OPPORTUNITY:

We're hiring a Security Engineer to run Blueberry's day-to-day security operations. Reporting to the Head of Security, you'll find and fix vulnerabilities across our Google Cloud Platform environment and Python/Django applications, and manage the tools and controls that protect our devices, network, and accounts. Work in our codebase also offers a path into application security.

WHAT YOU'LL OWN:

- Vulnerability management. Scan and monitor our GCP environment, self-hosted services, and dependencies, prioritize by risk, and track each issue to resolution.

- Remediation. Resolve vulnerabilities directly wherever you can, and partner with engineering on larger fixes.

- Detection and incident readiness. Maintain security logging, monitoring, and alerting, support incident investigations, and regularly test backups and recovery.

- Endpoint security. Deploy and manage EDR and MDM across company devices.

- Network security. Manage firewall and egress rules and network segmentation.

- Access management. Run access reviews, offboarding, and credential rotations.

- IT administration. Set up accounts and devices for new hires, administer our SaaS tools, and support teammates with device and account issues.

WHAT SUCCESS LOOKS LIKE:

Performance is data-driven and tied to the metrics you own, expected to center on:

- Time to remediate vulnerabilities, by severity

- Size and age of the open vulnerability backlog

- EDR and MDM coverage across devices

- On-time access reviews and offboarding

EXPERIENCE YOU'LL NEED

- 2+ years in security, cloud, systems administration, DevOps, or software engineering.

- Proficiency in Python and experience working in a production codebase.

- Strong Linux fundamentals, including patching and maintaining production systems.