SeniorStaff Security Engineer

Pomelo Care is the leading virtual medical practice for women and children providing care across pregnancy postpartum pediatrics menopause and perimenopause. We combine proactive 24/7 clinical care with technology that helps us reach patients earlier identify risks sooner and deliver personalized care throughout their journey. Our team includes clinicians technologists operators and problem-solvers working together to make high-quality care more accessible for families nationwide.

Your north star:Our engineering team is the engine behind our innovative virtual care platform building AI-powered solutions that fundamentally transform care delivery and create exceptional experiences for both patients and clinicians. If youre passionate about using technology to effect real tangible good in the world wed love to meet you. Security at Pomelo is an engineering problem. This role owns the execution side the controls automation and code that actually reduce risk with a lot of latitude to decide what matters and ship it. A separate compliance team owns policy and audit; you build the things that make us safer.

This role reports to VP of Engineering and can be based anywhere in the continental US.

• Own security problems end to end: navigate ambiguity to decide what matters build it ship it independently.
• Find the real risks and build the most direct controls that take them off the table.
• Build secure-by-default libraries guardrails and tooling so dozens of engineers can move fast without footguns.
• Define and implement strict least-privilege guardrails across all services to safeguard sensitive patient information and health metrics.
• Harden developer machines to minimize the risk of supply chain attacks and Whatever Comes Next from AI.
• Partner with compliance to turn control objectives into real controls and help focus effort on the requirements that genuinely reduce risk and unlock new commercial opportunities (HITRUST health plan requirements etc.).

• You have a strong track record of making organizations measurably safer. That track record is risks youve closed not tickets youve opened.
• You can tell signal from noise and you spend your time on the risks that actually move the needle.
• Youre a builder first: 5 years of software engineering with production-grade code under your belt (Kotlin Java Python Go C# or similar).
• You have real security depth threat modeling identity and auth flows the OWASP Top 10 cloud and supply-chain security.
• When somethings wrong your instinct is to understand the actual threat and build the most direct fix not to go shopping for a product that claims to handle it.
• Youre looking for room to own more over time and youre the type to take it not wait for it.

• Have built in healthcare and understand HIPAA and HITRUST and how to satisfy them without drowning engineering in process.
• Have experience with Google Cloud Platform and a modern product stack.
• Have built internal developer platforms or secure-by-default tooling that other engineers actually adopted.
• Have worked in a fast-paced product-oriented startup.

By joining Pomelo you will get in on the ground floor of a fast-moving well-funded and mission-driven startup that always puts the patient first. You will learn grow and be challenged and have fun with your team while doing it.
We strive to create an environment where employees from all backgrounds are respected. We value working across disciplines moving fast data-driven decision making learning and always putting the patient first.

• Comprehensive Health Dental and Vision coverage for employees and their families
• High deductible Health Plans with Health Savings Account (HSA) options
• Flexible Spending Account (FSA)
• Equity grant participation
• 401(k) program
• Competitive vacation policy
• 16 weeks paid parental leave
• Fully remote work flexibility (within the US)

The expected base salary range offered for this role is $190000-$260000. This role is also eligible for equity giving you an ownership stake in Pomelos mission. Actual compensation may vary based on relevant experience skills competencies and certifications.

At Pomelo we are committed to hiring the best team to improve outcomes for all mothers and babies regardless of their background. We need diverse perspectives to reflect the diversity of problems we face and the population we serve. We look to hire people from a variety of backgrounds including but not limited to race age sexual orientation gender identity and expression national origin religion disability and veteran status.

#LI-Remote

Please be cautious of potential recruitment fraud. With the increase of remote work and digital hiring phishing and job scams are on the rise with malicious actors impersonating real employees and sending fake job offers in an effort to collect personal or financial information.

Pomelo Care will never ask you to pay a fee or download software as part of the interview process with our company. Pomelo Care will also never ask for your personal banking or other financial information until after you have signed an offer of employment and completed onboarding paperwork that is provided by our People Operations team. All official communication with Pomelo Care People Operations team will come from domain email addresses ending in @.

If you receive a message that seems suspicious we encourage you to pause communication and contact us directly at to confirm its legitimacy. For your safety we also recommend applying only through our official Careers page. If you believe you have been the victim of a scam or identity theft please contact your local law enforcement agency or another trusted authority for guidance.