Security Engineer

Join RVO Health’s Security team to strengthen security controls, improve cloud posture, and protect sensitive data in a cloud-native environment.

Responsibilities

• Design, implement, and maintain security controls and architectures to protect cloud infrastructure, applications, and data from cyber threats.
• Strengthen cloud security posture and vulnerability management, including pull-request scanning, triage and tracking of findings to closure across engineering teams, and coverage and license optimization.
• Build and enforce software supply chain guardrails across the developer toolchain, covering packages, dependencies, and extensions, with tuned enforcement thresholds to reduce noise.
• Extend security into CI/CD pipelines, including governance of AI-authored code at the pipeline chokepoint.
• Create automation, internal tooling, and integrations for the developer platform and security stack so security controls are self-service rather than ticket-driven.
• Collaborate with Platform & Software Engineering to increase visibility and awareness of security issues and help prioritize resolution.
• Conduct security assessments such as code reviews and application security testing to identify and mitigate risk in new and changing systems.
• Participate in a weekly on-call rotation for managed detection and response escalations, including investigation, incident response, and root cause analysis.
• Develop and maintain security standard operating procedures and policies aligned to industry best practices and regulatory requirements (examples include HIPAA and NIST CSF).
• Stay current on emerging tactics, techniques, and procedures for application and infrastructure vulnerabilities, especially in healthcare, and adapt strategy or tooling to address new threats.

Requirements

• Bachelor’s degree in Computer Science (or related field) OR equivalent experience.
• Minimum 4+ years of experience in application security, cloud security, or a related cybersecurity role.
• Strong understanding of cloud security principles, architectures, and services (AWS or Azure preferred).
• Hands-on experience with cloud security posture management or CNAPP tooling (e.g., Wiz, Orca, Prisma Cloud), plus a record of driving vulnerability findings to closure with engineering teams.
• Experience building security automation, tooling, and integrations, with proficiency in at least one scripting or programming language.
• Working knowledge of secure coding practices.
• Knowledge of security frameworks, standards, and regulations (examples include NIST CSF, HIPAA, MITRE ATT&CK).
• Strong analytical and problem-solving skills, with the ability to think critically and make sound decisions.
• Experience in incident response and recovery.

Preferred

• Professional certifications (examples include CISSP, CCSP, OSCP, GIAC).
• Expertise in AWS security controls, monitoring, and orchestration (examples include SCPs, GuardDuty, Config, Macie).
• Experience with Terraform, GitHub, and DevSecOps workflows, especially securing GitHub Actions and other CI/CD pipelines.
• Experience securing AI- or LLM-assisted development workflows, or reviewing AI-generated code at scale.
• Experience with internal developer platforms or portals (example: Backstage).
• Experience working alongside an MDR or managed SOC provider.

Technologies

• AWS, Azure
• Wiz, Orca, Prisma Cloud
• HIPAA, NIST CSF, MITRE ATT&CK
• Terraform
• GitHub, GitHub Actions
• CNAPP

Compensation

• Starting salary: $100,000 - $130,000*
• Note: actual salary is based on geographic location, qualifications, and experience.

Benefits

• Health insurance coverage (medical, dental, and vision)
• Life insurance
• Short and long-term disability insurance
• Flexible spending accounts
• Paid time off
• Holiday pay
• 401(k) with match
• Employee Assistance Program
• Paid parental bonding benefit program
• Pharmacy benefits
• Income Protection Plans
• Pet Services Plans
• Mental health support
• Wellness coaching
• HSA (Health Savings Account)
• Commuter benefits
• Gym & fitness center discount program

Location

• Minneapolis, MN (hybrid)
• Office days: Tuesday through Thursday
• Remote: Mondays and Fridays (optional)
• Address: 11000 Optum Cir Eden Prairie, MN 55344