Job details

Staff Software Engineer, Security

Get a free resume review

Dandy is transforming the massive ($200B) but antiquated dental industry. Backed by some of the world's leading venture capital investors, we are on an ambitious mission to integrate and simplify every function of the dental practice through technology. By building the operating system for every dental office in America, Dandy is empowering dentists with technology, innovation, and world-class support to achieve more for their practice, their people, and their patients.

About the Team

We are offering a distinct opportunity: the chance to be our first dedicated security leader and help establish the formal security and compliance function for our growing dental tech platform.

We have a modern tech stack powering our business, but we need an expert like you to build out the security strategy, mature our processes, implement the right tooling, and foster a strong security culture. This is your opportunity to take a leadership role with high autonomy and resources, integrating best practices within a rapidly growing organization. You'll be a key security authority, tackling crucial challenges around protecting sensitive patient data (HIPAA compliance is critical), securing our cloud infrastructure, and embedding robust security within a fast-paced development lifecycle.

If you're motivated by significant ownership, making a tangible impact quickly by bringing structure and expertise, and building a mature security posture for a growing company poised for significant impact, this role provides that unique combination.

What You’ll Do

Formalize and lead the end-to-end vulnerability management program, implementing appropriate tools, automation, and remediation processes.
Establish and manage our security compliance program, ensuring robust adherence to HIPAA and other relevant standards through policy development, assessments, and audits.
Assess, select, implement, and manage core security infrastructure and tooling tailored to our cloud environment.
Develop and lead Dandy's security incident response capability, ensuring readiness and effective management.
Define, own, and drive the company's security strategy and roadmap, acting as the key security voice to engineering and executive leadership.

What We’re Looking For

8+ years of progressive cybersecurity experience with a proven track record of leading impactful security initiatives or maturing security programs.
Deep strategic and hands-on expertise across security domains, especially vulnerability management, compliance (HIPAA expertise highly valued), and cloud/application security.
Experience assessing existing environments and implementing effective security controls and processes.
Proven success in leading incident response and conducting thorough risk assessments.
Strong analytical skills, excellent communication to champion security across the company, and the drive to operate autonomously and build out a critical function.
Adaptability to apply security principles effectively in a fast-paced, high-growth startup environment.

Bonus Points

Deep experience within the healthcare technology sector and implementing HIPAA controls.
Proven experience integrating security effectively into CI/CD and DevSecOps workflows.
Strong scripting/automation skills (Python, Go, etc.) for security contexts.
Relevant industry certifications (CISSP, CISM, OSCP, cloud security).
Experience helping an organization scale its security practices during rapid growth.

For full time positions, we offer a wide range of best in class, comprehensive and inclusive employee benefits including healthcare, dental, parental planning, mental health benefits, a 401(k) plan, and paid time off.

Dandy is proud to be an equal-opportunity employer. We are committed to building a diverse and inclusive culture that celebrates authenticity to win as one. We do not discriminate on the basis of race, religion, color, national origin, gender, gender identity, sexual orientation, age, marital status, disability, protected veteran status, citizenship or immigration status, or any other legally protected characteristics.

Dandy also fully complies with the Americans with Disabilities Act (ADA). We are dedicated to embracing challenges and creating an accessible, inclusive workplace for all individuals. If you require any accommodations for your interview or have any questions beforehand, rest assured that we will do everything we can to meet your needs. Visit Dandy Careers for more!

Average salary estimate

$150000 / YEARLY (est.)

min

max

$120000K

$180000K

If an employer mentions a salary or salary range on their job, we display it as an "Employer Estimate". If a job has no salary data, Rise displays an estimate if available.

What You Should Know About Staff Software Engineer, Security, Dandy

Dandy is on a transformative mission to reshape the $200 billion dental industry using technology, and we’re looking for a passionate Staff Software Engineer, Security to lead the charge! As our first dedicated security leader, you're not just another cog in the wheel; you will be pivotal in establishing and refining our security and compliance functions for a cutting-edge dental tech platform. This role is packed with excitement and challenges as you'll have the autonomy to craft our security strategy, implement essential tools, and foster a security-driven culture. Your expertise will help protect sensitive patient data while ensuring compliance with standards like HIPAA. You'll manage everything from vulnerability management programs to security incident responses, all integrated within a fast-paced development lifecycle. With your significant ownership, you’ll tackle crucial issues and embed robust security practices that will directly impact our growth and mission to empower dentists across America. Dandy is not just about building an operating system for every dental office; it’s about creating an innovative, secure environment where they can thrive. If you’re ready to make a meaningful impact in a dynamic startup setting, we would love to hear from you!

Frequently Asked Questions (FAQs) for Staff Software Engineer, Security Role at Dandy

What are the main responsibilities of a Staff Software Engineer, Security at Dandy?

As a Staff Software Engineer, Security at Dandy, your primary responsibilities will encompass formalizing and leading the end-to-end vulnerability management program, ensuring compliance with HIPAA and other relevant standards, managing security infrastructure tailored to our cloud environment, and developing our security incident response capability. This position allows you to act as a key security voice within our engineering and executive leadership teams, shaping the future of our security strategy.