Senior Security Engineer

AT A GLANCE

RVO Health is a first-of-its-kind comprehensive consumer healthcare platform that meets people where they are in their personal journeys and connects them with both the information and the care they need. RVO Health is a partnership between Red Ventures and UnitedHealth Group. Together we’re focused on delivering on our vision of a stronger and healthier world. RVO Health has the largest consumer health and wellness audience online. Every month, we help nearly 100 million people take steps on their daily journey to lifelong well-being. 

As part of our RVO Health Security team, you will be a technical leader that executes strategic initiatives that improve our security posture and play a significant part in protecting our sensitive data. You will work in a collaborative Agile environment, working closely with the business, IT, and engineering teams. You will apply your skills in a highly dynamic, innovative, cloud-native environment with a strong security-minded culture. 

What You’ll Do

• Design, implement, and maintain security controls and architectures to protect the company's cloud infrastructure, applications, and data from cyber threats.
• Partner with Platform & Software Engineering teams to create visibility and awareness of security issues and work to prioritize their resolution in a collaborative way.
• Perform security assessments, including code reviews, penetration testing, and vulnerability scanning, to identify and mitigate potential security risks.
• Lead strategic cross-functional security projects across application security, cloud security, and IT.
• Monitor and respond to security incidents, investigate potential threats, and perform root cause analysis.
• Develop and maintain security standard operating procedures, and policies in accordance with industry best practices and regulatory requirements (e.g., HIPAA, NIST CSF).
• Stay informed of the latest developments in tactics, techniques, and procedures related to application & infrastructure vulnerabilities - especially in the healthcare space - and adapt the strategy or tooling to address new threats.

What We’re Looking For

• Bachelor’s degree in Computer Science, related field OR equivalent experience
• Minimum 4+ years of experience in application security, cloud security, or a related cybersecurity role.
• Solid understanding of cloud security principles, architectures, and services (AWS or Azure preferred)
• Hands-on experience with application security testing tools (e.g., OWASP ZAP, Burp Suite, Github Advanced Security) and secure coding practices.
• Knowledge of security frameworks, standards, and regulations (e.g., NIST CSF, HIPAA, MITRE ATT&CK).
• Strong problem-solving and analytical …