Security Engineer

About the role

WE'RE BUILDING A NEW HEALTHCARE CLEARINGHOUSE

Stedi is the only headless clearinghouse and RCM engine. Headless means every part of our product is accessible via API. Developers and AI agents build their own interface on top of it. By offering modern, AI-ready APIs alongside traditional real-time and batch EDI processes, we enable both healthcare technology businesses and established players to exchange mission-critical transactions. Our clearinghouse product and customer-first approach have set us apart. Stedi was ranked by Ramp https://ramp.com/data/top-saas-vendors-on-ramp-march-2026 as one of the fastest-growing SaaS vendors.

Stedi has lightning in a bottle: engineers and designers shipping products week in and week out; a lean business team supporting the company's infrastructure; a passion for automation and eliminating toil; and $142 million in funding from top investors like Stripe, Addition, USV, Bloomberg Beta, First Round Capital, and more.

To see what we ship, watch the 2026 Stedi Keynote https://www.youtube.com/watch?v=MxyCUNAr9Y8. To learn more about how we work, watch our founder Zack's interview with First Round Capital https://www.youtube.com/watch?v=IO6sR-i5rSs.

WHAT WE’RE LOOKING FOR

We are seeking an experienced Security Engineer to join our Platform Team. This team is at the core of our infrastructure, responsible for managing multiple AWS Organizations and providing the foundational tools and services that enable our engineering teams to build reliable, secure, and compliant applications.

The Platform Team’s responsibilities span a wide range of areas, including:

- The AWS infrastructure that our engineering teams rely on.

- Management of our GitHub organization and IT operations.

- Supporting compliance efforts to ensure alignment with industry standards (SOC, HIPAA, HITRUST).

As a Security Engineer, you will play an active role in how we set up our AWS infrastructure, software development lifecycle, and endpoint security. Your contributions will help ensure our engineering teams build applications in a way where it is easy to demonstrate alignment with regulatory and compliance requirements.

HOW WE BUILD

- We use AWS exclusively for our backend infrastructure that processes customer data. We use tools like GitHub, Stripe, Vanta, and PagerDuty, but all of our application work happens on AWS.

- We use serverless technologies almost exclusively: Lambda, API Gateway, SQS, SNS, DynamoDB, Aurora Serverless, and more. We don’t run a single server on prem or in the cloud.

- We use the CDK (TypeScript) to define infrastructure-as-code.

- We have a strong preference for using AWS products over 3rd party solutions. This simplifies vendor management and compliance, and ensures we can benefit from AWS's integration capabilities and innovations now and in the future.

What you'll do

- Develop playbooks and address security-related tasks in our AWS serverless environments.