Senior Security Engineer

Company OverviewFounded in 2015, PHIL is a Series D health-tech startup that is building a platform that interfaces between doctors, pharmacies, and patients to streamline the process of patients receiving prescriptions. This is a complex, archaic industry, and we've set out to change that. Phil’s B2B2C platform provides an end-to-end prescription management and delivery service. Our robust platform connects patients, prescribers, pharmacies, and manufacturers, enabling easy and affordable access to medicine. Through its digital stakeholder experiences, patient access services, market access solutions, and distribution models, pharma manufacturers can deliver affordable and timely therapy access to patients, resulting in more patients staying on their treatment plans longer. Consequently, pharma manufacturers are enabled for more innovation. The team at Phil is a group of like-minded individuals from varying backgrounds, passionate about creating a new and innovative healthcare platform that is focused on patient experience and overall human wellbeing. Ready to join our team of mission-driven, analytical, and passionate people? Keep reading! Job DutiesFacilitate architecture, design, and deployment of information security solutions, compliance and policiesManage and oversee HIPAA, SOC 2, and ISO, compliance policy implementations, certifications and audit processes. Ensures information security policies, standards, and procedures are up-to-date. Perform/Develop test plan and identify testing requirements, scenarios, methodologies, and configurations as part of technology evaluations and vendor integrationsEvaluates security trends, evolving threats, risks and vulnerabilities and applies tools to mitigate risk as necessaryWorks closely with the Chief Privacy Officer and Chief Security Officer to ensure alignment between security and privacy compliance programs including policies, practices and investigations, and acts as a liaison to the information systems and compliance departmentsTroubleshoot, diagnose, and resolve or escalate Incidents and problemsDesign and implement best practice security solutions (tools and services) to mitigate security threats and risks that may impact the businessManage and conduct ongoing security training to the workforce. Drive and promote activities to foster information security awareness within the organization and related entitiesCollaborate with leadership on network design improvements, capacity planning, risk mitigation, vulnerability, and security event managementEstablish and administer a process for investigating and acting on security incidents which may result in a privacy breach breachesRequirementsBachelor’s degree in computer information security/related field or equivalent experience5+ years of experience in a security engineering roleExperience architecting, designing, and deploying security solutions for enterprise environments and working with enterprise security solution setsExtensive experience and knowledge of HIPAA, SOC-2 and other security policiesExperience with deploying and managing diverse set of security technologiesExperience with penetration testing toolsDemonstrated technical understanding of system architecture and design, operating systems, network infrastructure, device configuration hardening, and patch and configuration managementExtensive experience and knowledge of AWS services and technologiesThorough understanding of the latest security principles, techniques, and protocolsWorking knowledge of shell scripting and Python programming languageKnowledge of authentication protocols such as LDAP, SAML, OAUTHExperience with securing one or more of: CI/CD, Kubernetes, DockerBenefitsGround floor opportunity with one of the fastest-growing startups in health-techFully remote working environmentCompetitive compensation (commensurate with experience)Full benefits (medical, dental, vision)401(k) contribution opportunityPHIL Inc. is an equal-opportunity employer. Apply To This Job