Security Engineer

Blueberry Pediatrics

2d•$110,000 - $140,000

About The Position

Blueberry is hiring a Security Engineer to run day-to-day security operations. Reporting to the Head of Security, this role identifies and remediates vulnerabilities across Blueberry's Google Cloud Platform environment and Python/Django applications, and manages tools and controls protecting company devices, network, and accounts. Work in the codebase may also provide a path into application security. The position is limited to candidates who live and work in the United States; working from outside the US, including while traveling internationally, is not supported.

Requirements

At least 2 years of experience in security, cloud, systems administration, DevOps, or software engineering.
Proficiency in Python and experience working in a production codebase.
Strong Linux fundamentals, including patching and maintaining production systems.
Experience with Google Cloud Platform or another major cloud provider.
Hands-on experience with several of the following: vulnerability scanning, EDR, MDM, logging and monitoring, network security, and identity and access management.

Nice To Haves

Experience with Django or web application development.
Experience remediating vulnerabilities.
Experience in healthcare or another regulated industry.

Responsibilities

Scan and monitor the GCP environment, self-hosted services, and dependencies for vulnerabilities; prioritize findings by risk and track them through resolution.
Remediate vulnerabilities directly when possible and partner with engineering on larger fixes.
Maintain security logging, monitoring, and alerting; support incident investigations and regularly test backups and recovery.
Deploy and manage endpoint detection and response (EDR) and mobile device management (MDM) across company devices.
Manage firewall and egress rules and network segmentation.
Conduct access reviews, manage offboarding, and rotate credentials.
Set up accounts and devices for new hires, administer SaaS tools, and support teammates with device and account issues.