Associate Security Engineer (College Grad 2027)

Healthcare in the U.S. is fundamentally broken. The system is so complex that 88% of U.S. adults do not have the health literacy necessary to navigate it without help. Solace cuts through the red tape of healthcare by pairing patients with expert advocates and giving them the tools to make better decisionsand get better outcomes.

Were a Series C startup founded in 2022 and backed by Inspired Capital Craft Ventures Torch Capital Menlo Ventures Signalfire and IVP. Our U.S. based team is lean mission-driven and growing quickly.

Solace isnt a place to coast. Were here to redefine healthcareand that demands urgency precision and heart. If youre looking to stretch yourself sharpen your edge and do the best work of your life alongside a team that cares deeply youre in the right place. Were intense and we like it that way.

Read more in our Bloomberg funding announcement here.

Are you a new grad who wants to defend something that matters from day one As an Associate Security Engineer you wont be relegated to ticket triage or endless compliance checklists. Youll be doing real security work that protects real patient data within your first weeks. This isnt a hand-holding job. Youll be challenged daily expected to move fast learn faster and take ownership of your work like a seasoned engineer.

Youll join a small security team that built this program from scratch. We will push you to grow but youll also be expected to think independently ask the right questions and own your work from start to finish.

You are scrappy resourceful and eager to prove yourself. You dont need all the answers; you need the drive to find them. Youre not afraid of ambiguity or hard problems; in fact they excite you. You take feedback like fuel and youre looking for a place that will invest in making you exceptional not comfortable.

This is an in person role in our Redwood City office 3 days a week.

• Do real security work in your first week: no shadowing period no toy projects.

• Rotate across the full breadth of a security program: incident response cloud security identity and access management endpoint security application security vendor reviews and compliance engineering. Youll find out what youre great at by doing all of it.

• Take ownership of projects end-to-end. Youll be accountable for what you find and fix and youll feel the weight and pride of that responsibility.

• Work directly with senior security engineers platform engineers and compliance. Youll have mentorship but youll also be expected to drive your own work forward.

• Investigate incidents review access harden systems and close out risks. Not glamorous but essential and youll learn more from this than any certification could teach you.

• Automate the boring stuff. If you do something twice by hand we expect you to script it the third time.

• Participate in incident reviews vendor security reviews and risk discussions. Your voice matters here even on day one.

• A bachelors degree in Computer Science Cybersecurity Engineering or related field (or equivalent practical experience) graduating between December 2026 and June 2027.

• Solid fundamentals in networking operating systems and how the web actually works (HTTP DNS TLS authentication).

• Scripting ability in at least one language (Python TypeScript Bash etc.). You dont need to be a software engineer but you need to be able to read code and write automation.

• Evidence you can actually do security: CTFs home labs security projects internships bug bounty submissions open source contributions. We care about what youve broken and fixed not just what you studied.

• A hunger to learn and an ego small enough to admit when you dont know something.

• Grit. You dont give up when things get hard. You Google you read the docs you ask questions you figure it out.

• Strong communication skills. You can explain a finding to an engineer take feedback without defensiveness and translate risk for people who arent technical.

• Sound judgment and discretion. Were a healthcare company handling protected health information and youll be trusted with sensitive access and sensitive situations.

• Extreme bias toward action. Youd rather ship something imperfect and iterate than wait for perfect.

Youll get hands-on experience across every domain of a modern security program:

• Incident response and investigations

• Cloud security across AWS and GCP

• Identity and access management (Okta Google Workspace)

• Security monitoring and detection

• Endpoint and corporate security

• Application and product security

• HIPAA compliance and security automation

Most companies will pigeonhole you into one narrow function for years. Here youll touch every part of a security program and figure out where you shine. Most companies will give you canned training scenarios. Well give you real incidents real systems and real patient data to protect. Youll grow faster here in one year than you would in three years at a big company. It will be hard. You will struggle. And you will come out the other side a dramatically better security engineer.

This is not a job for someone looking for a gentle onboarding process. This is for the new grad who wants to prove they can hang with engineers who have years of experience. If thats you we cant wait to meet you.

Applicants must be based in the United States.

Up for the Challenge

We look forward to meeting you.

Fraudulent Recruitment Advisory: Solace Health will NEVER request bank details or offer employment without an interview. All legitimate communications come from official emails only or . Report suspicious activity to or

Required Experience:

IC