Principal Security Engineer

Imagine Pediatrics

. Set the technical vision for the security stack across endpoint, email, data loss prevention, vulnerability management, penetration testing, network, application, and data security .

Posted 10/26/2026full-timeRemote • Texas • United StatesLead💰 $195,000 - $225,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates deep expertise in cloud and identity security architecture, particularly within AWS and Microsoft Azure/EntraID, while effectively leading security strategy and compliance initiatives in the healthcare sector. Proven ability to mentor engineering teams and drive alignment across security, IT, and engineering functions.

Highest-signal resume keywords

Cloud And Identity Security ArchitectureSecurity Strategy DevelopmentHITRUST And HIPAA ComplianceThreat Modeling And Secure SDLCArtificial Intelligence In Security

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Security ArchitectureIncident ResponseVulnerability ManagementPenetration TestingDevSecOps ImplementationRisk AssessmentData Loss PreventionHealthcare API SecurityAutomated Configuration ChecksThreat Detection

Soft Skills

CollaborationCoachingLeadershipProblem-SolvingCommunication

Tools & Technologies

AWSMicrosoft AzureEntraIDCrowdStrike FalconGitHub Advanced SecuritySnowflakeMicrosoft IntuneJIRA Service ManagementMerakiFHIR

Certifications & Qualifications

CISSPCCSPCISMGIACAWS Certified Security – SpecialtyMicrosoft Certified: Cybersecurity Architect Expert

Industry Keywords

Healthcare SecurityComplianceSecurity EventsAI Security RisksSecurity Roadmap

Tech Stack

Tools & technologies

AWSAzureCloudCyber SecurityJamfSDLCSnowflake

About the role

Key responsibilities & impact

Set the technical vision for the security stack across endpoint, email, data loss prevention, vulnerability management, penetration testing, network, application, and data security
Define long-term cloud and identity security strategy across Microsoft Azure/EntraID and AWS
Shape secure infrastructure design patterns and company-wide technical decisions
Lead security architecture review and threat modeling for Care Hub, connected services, Medplum, and Snowflake data platforms
Define DevSecOps strategy and standardize security gates across the SDLC and CI/CD pipeline
Serve as senior technical escalation point, including in the on-call rotation, for complex security events
Strengthen incident playbooks, ransomware and critical-SaaS exercises, and restoration testing
Monitor and advise on the evolving healthcare threat landscape, including AI-enabled and agentic attacks
Build documentation and evidence pipelines supporting HITRUST, HIPAA, and NIST compliance requirements
Deliver decision-ready recommendations, risk rankings, and documented resolution pathways for high-stakes security questions
Drive automated configuration checks and drift detection to prevent systemic misconfigurations
Shape the multi-year security roadmap and contribute to quarterly engineering planning
Explore proofs of concept to de-risk future security initiatives
Champion thoughtful AI adoption within security and guide secure adoption of AI tools and products
Partner with engineering, product, IT, and clinical stakeholders to embed security into digital products
Mentor the security engineering team and coach engineers on security craftsmanship
Advise leadership and align security decisions with business priorities
Apply professional discretion when viewing sensitive and personal data
Perform other duties as assigned

Requirements

What you’ll need

Bachelor of Science degree in Computer Science, Information Security, Business, Management, or a related field is desired; advanced degree a plus
Relevant license or certifications such as CISSP, CCSP, CISM, GIAC, AWS Certified Security – Specialty, or Microsoft Certified: Cybersecurity Architect Expert preferred
10+ years of experience as a Security Engineer, Principal Security Engineer, Security Architect, or similar role(s)
At least 5 years of experience within the healthcare industry
Track record of setting security technical strategy and driving alignment across security, IT, and engineering teams
Deep expertise in cloud and identity security architecture across AWS and Microsoft Azure/EntraID
Hands-on application and product security experience, including threat modeling, secure SDLC and CI/CD design, and securing healthcare APIs (FHIR, SMART on FHIR)
Experience leading detection and response programs, partnering with MDR providers, and responding to serious security incidents and data breaches
Extensive experience translating HITRUST and HIPAA Security Rule requirements into technical controls and supporting auditors, payors, and regulators
Experience using Artificial Intelligence to enhance and automate security processes and understanding of AI security risks
Knowledge of AWS, Microsoft Intune, EntraID, CrowdStrike Falcon (EDR/SIEM), GitHub Advanced Security, Snowflake, JAMF, Meraki, and JIRA Service Management
Strong collaboration and coaching skills, with demonstrated success developing senior engineers
Comfort operating autonomously in ambiguity and exploring early-stage ideas
Experience working in a fast-paced, hypergrowth, collaborative environment
Willingness to participate in an on-call rotation
Contributions to the broader security community are a plus

Benefits

Comp & perks

Annual bonus incentive
Competitive company benefits package
Employee equity purchase program eligibility
Competitive medical, dental, and vision insurance
Healthcare and Dependent Care FSA
Company-funded HSA
401(k) with 4% match, vested 100% from day one
Employer-paid short and long-term disability
Life insurance at 1x annual salary
20 days PTO
10 Company Holidays
2 Floating Holidays
Paid new parent leave
Additional benefits to be detailed in offer