Security Engineer

About the role

Healthcare is complex. We're here to change that.

RVO Health is a health technology company on a mission to make health easier to navigate, more accessible, and more affordable for everyone.

Here, you'll help over 40 million people every month, with a team that genuinely cares about the work and each other.

At a Glance

As part of our RVO Health Security team, you will play a major part in strategic initiatives that improve our security posture and protect our sensitive data. You will work in a collaborative Agile environment, working closely with the business, IT, and engineering teams. You will apply your skills in a highly dynamic, innovative, cloud-native environment with a strong security-minded culture.

Location: Minneapolis, MN | Hybrid

We believe great collaboration happens when we're together, solving problems, learning from each other, and connecting as a team. That's why we're in our offices Tuesday through Thursday each week. You are welcome to work remotely Mondays and Fridays if you wish.

Address: 11000 Optum Cir Eden Prairie, MN 55344

What You'll Do

• Design, implement, and maintain security controls and architectures to protect the company's cloud infrastructure, applications, and data from cyber threats.
• Improve our cloud security posture and vulnerability management program - pull-request scanning, triage and tracking of findings to closure across engineering teams, and coverage and license optimization.
• Build and enforce software supply chain controls across the developer toolchain - package, dependency, and extension guardrails, with enforcement thresholds tuned to reduce noise rather than generate it.
• Extend security into CI/CD pipelines, including the emerging problem of governing AI-authored code at the pipeline chokepoint.
• Build automation, internal tooling, and integrations against our developer platform and security stack so that security controls are self-service rather than ticket-driven.
• Partner with Platform & Software Engineering teams to create visibility and awareness of security issues and work to prioritize their resolution in a collaborative way.
• Perform security assessments, including code reviews and application security testing, to identify and mitigate risk in new and changing systems.
• Participate in a weekly on-call rotation for managed detection and response escalations; investigate potential threats, respond to security incidents, and perform root cause analysis.
• Develop and maintain security standard operating procedures and policies in accordance with industry best practices and regulatory requirements (e.g., HIPAA, NIST CSF).
• Stay informed of the latest developments in tactics, techniques, and procedures related to application and infrastructure vulnerabilities - especially in the healthcare space - and adapt the strategy or tooling to address new threats.

What We're Looking For

Required

• Bachelor's degree in Computer Science, related field OR equivalent experience
• Minimum 4+ years of experience in application security, cloud security, or a related cybersecurity role.
• Solid understanding of cloud security principles, architectures, and services (AWS or Azure preferred).
• Hands-on experience with cloud security posture management or CNAPP tooling (e.g., Wiz, Orca, Prisma Cloud), and a track record of driving vulnerability findings to closure with engineering teams.
• Experience building security automation, tooling, and integrations, with working proficiency in at least one scripting or programming language.
• Working knowledge of secure coding practices.
• Knowledge of security frameworks, standards, and regulations (e.g., NIST CSF, HIPAA, MITRE ATT&CK).
• Strong problem-solving and analytical skills, with the ability to think critically and make sound decisions.
• Experience in incident response and recovery.

Preferred

• Professional certifications (e.g., CISSP, CCSP, OSCP, GIAC).
• Expertise in AWS security controls, monitoring, and orchestration (SCPs, GuardDuty, Config, Macie, etc.)
• Working familiarity with Terraform, GitHub, and DevSecOps workflows - particularly securing GitHub Actions and other CI/CD pipelines.
• Experience securing AI- or LLM-assisted development workflows, or reviewing AI-generated code at scale.
• Experience with internal developer platforms or portals (e.g., Backstage).
• Experience working alongside an MDR or managed SOC provider.

Additional information

Pursuant to various state Fair Pay Acts, below is a summary of compensation elements for this role at the company. The following benefits are provided by RVO Health, subject to eligibility requirements.

• Starting Salary: $100,000 - $130,000*

*Note actual salary is based on geographic location, qualifications and experience

• Health Insurance Coverage (medical, dental, and vision)
• Life Insurance
• Short and Long-Term Disability Insurance
• Flexible Spending Accounts
• Paid Time Off
• Holiday Pay
• 401(k) with match
• Employee Assistance Program
• Paid Parental Bonding Benefit Program
• Pharmacy Benefits
• Income Protection Plans
• Pet Services Plans
• Mental Health Support
• Wellness Coaching
• HSA- Health Savings Account
• Commuter Benefits
• Gym & Fitness Center Discount Program

We do not provide visa sponsorship for this role at this time.

#LI-Hybrid

RVO Health Privacy Policy: