Staff Security Engineer (Remote - US only)

This is a remote staff-level security role at a consumer health hardware and software company that builds connected products and AI-driven recovery features for customers in more than 30 countries. You will be a generalist with real ownership over much of the security program, including vulnerability management, corporate IT and identity, cloud, and AI security. The team is small, so you will work directly with backend, firmware, and data engineers, clinical and R&D teams, and the Head of Security.

What you'll do

• Design and run a risk-based vulnerability management program across cloud, containers, application dependencies, corporate devices, and connected hardware, prioritizing by exploitability and business impact rather than raw CVSS scores.
• Set remediation SLAs and build automation that routes findings to owners, tracks them to closure, and escalates overdue items.
• Own software supply chain security, including dependency risk, SBOMs, container image hygiene, and CI/CD guardrails; coordinate vulnerability intake and patch rollout with firmware and hardware teams.
• Scope and manage penetration tests and bug bounty activity, including triage and verification of fixes.
• Set technical direction for corporate IT and identity (Google Workspace, device management, SSO, and audit-ready access reviews), and keep compliance controls passing through infrastructure-as-code.
• Run security design reviews, assist with incident response, build governance for safe AI use, and report posture through metrics for executives and auditors.

What you need

• 10+ years in security and/or IT engineering, including leading major initiatives.
• Hands-on experience operating a SIEM platform (such as Datadog, Panther, Splunk, or Elastic).
• Corporate IT fluency: Google Workspace administration, MDM, and identity lifecycle management.
• Scripting ability in Python or similar languages.
• Strong written communication for runbooks, triage notes, and audit evidence.
• Must be located in the United States. The posting describes an intense culture, with team members often working 60+ hours per week and a high-pressure pace.

Applicants must be based in: United States.

How to apply

Get the free i'llTip app to see the employer's details and apply. i'llTip's AI can tailor your résumé to this job, and you'll get alerts for similar roles.

Prefer the website? Continue on illtip.comOr get the app: Android · iPhone

🔔 Get new jobs like this first: join i'llTip Jobs on Telegram · or get personal job alerts