Job details

Staff Product Security Manager

At Cadence, we believe that a better quality of life – for both our patients and employees – begins with better care.

Cadence partners with the nation’s most patient-centric health systems to deliver life-saving treatment to patients with chronic conditions at scale while lowering the cost of care. Whether you are a Product Manager, Registered Nurse, Staff Engineer, or Nurse Practitioner, your daily work will directly impact the quality of life for patients with chronic diseases.

The Cadence Solutions team seeks a Staff Product Security Engineer to join our Security Team. This role is pivotal in ensuring the security and integrity of our software products and services. The ideal candidate will have a strong background in software security, an innovative mindset, and a passion for identifying and mitigating security risks. You will work closely with internal teams to design, build, and maintain secure systems and contribute to all phases of the development lifecycle.

WHAT YOU’LL DO:

Work across Product and Engineering teams to influence positive security change and introduce improved security practices into our product development lifecycle.
Implement and manage security strategies tailored to our technology stack, focusing on securing software applications, networks, and databases
Build tools with an emphasis on self-service, automation, and performance that identify and mitigate application security risks and flaws.
Integrate security guardrails into the development lifecycle.
Perform design, architecture, and source code reviews which inform recommendations and standards to enhance the security of our platform and build process.
Conduct threat models, penetration testing, and offensive security exercises.
Conduct bug bounty issue evaluation, investigation, and remediation.
Develop and maintain documentation related to security procedures and protocols.
Stay updated on the latest threats to inform proactive security measures.
Respond to and investigate security incidents.

WHO YOU ARE

5+ years of software development with an emphasis on product/application security
5+ years in a broad set of general purpose programming languages (eg Python, Go).
Previous experience in a high-growth, fast-paced startup environment.
Diverse experience with application security tooling and processes that include code review, SAST, penetration testing, and risk management.
High proficiency with source code management tools and security features of each(e.g., Github, Bitbucket).
Obsessive focus on understanding threat vectors and what poses a risk for our organization.
Fluency in threat modeling and ability to interpret risk for different audiences.
Strong understanding of security protocols, cryptography, authentication, authorization, and security.
Familiarity with security frameworks (e.g., OWASP, NIST Cybersecurity Framework) and regulatory compliance (e.g., GDPR, HIPAA).
Excellent analytical and problem-solving skills.
Ability to work independently as well as collaboratively in a team environment.
Excellent communication skills, capable of conveying security concepts to a variety of stakeholders.
Capable of understanding competing priorities within a fast-paced environment and the ability to effectively prioritize.
Action and results oriented with demonstrated ability to proactively problem solve.

WHO WE ARE:

Seeks responsibility — can be trusted and empowered to make decisions and deliver results
Loves rolling-up sleeves and going from 0 to 1 — everyone, no matter how senior, contributes meaningfully
Extraordinarily candid — delivers and receives feedback with integrity
Exceeds expectations — goes above and beyond for co-workers, patients, clinicians, hospitals, and communities
Never satisfied — keeps iterating & improving and embraces a growth mindset.
Values speed & quality — understands that both can be done!

WHAT YOU’LL GET:

Cadence recognizes the unique needs of its diverse, distributed workforce and seeks to provide an inclusive work environment for its world-class clinicians and technologists.

Company culture all about impact, shared growth mindset, empowerment, and integrity
An opportunity to help improve the quality of life of millions of Americans
Medical, dental, and vision insurance
Competitive salaries and stock options
OneMedical (in-person primary care), TelaDoc (virtual primary care), and TalkSpace (online mental health services) memberships
Discounted ClassPass memberships
Unlimited PTO and paid holidays
Remote equipment setup and home office stipend
Paid Parental Leave
401K and 401K match
Charitable Donation Match program
Expected compensation: $190,000-$250,000 annual base salary
Location: Remote

Cadence is committed to equal opportunity and fairness regardless of race, color, religion, sex, gender identity, sexual orientation, nation of origin, ancestry, age, physical or mental disability, country of citizenship, medical condition, marital or domestic partner status, family status, family care status, military or veteran status or any other basis protected by local, state or federal laws. We also require full vaccination, including a booster, with an FDA-approved COVID-19 vaccination for all employees. Cadence provides reasonable accommodations to applicants and employees with a qualifying disability or conflict with a sincerely held religious belief unless doing so would cause undue hardship or fail to eliminate a direct threat.

*A notice to Cadence applicants: Our Talent team only directs candidates to apply through our official careers page at https://www.cadence.care/our-team. Cadence will never refer you to external websites, ask for payment or personal information, or conduct interviews via messaging apps. We receive all applications through our website and anyone suggesting otherwise is not with Cadence.

Cadence Solutions Glassdoor Company Review

2.6