Staff Security Engineer

Modern Health 

Modern Health is a mental health benefits platform for employers. We are the first global mental health solution to offer employees access to one-on-one, group, and self-serve digital resources for their emotional, professional, social, financial, and physical well-being needs—all within a single platform. Whether someone wants to proactively manage stress or treat depression, Modern Health guides people to the right care at the right time. We empower companies to help all their employees be the best version of themselves, and believe in meeting people wherever they are in their mental health journey.

Modern Health is backed by investors like Kleiner Perkins, Founders Fund, John Doerr, Y Combinator, and Battery Ventures and raised more than $170 million in less than two years, making Modern Health the fastest entirely female-founded company in the U.S. to reach Unicorn status.

More about our culture and what you can expect when you join the team:

• “It Takes a Village” culture. Modern Health has a unique and unabashed culture centered around high empathy and high accountability - with a drive to win. We are energized by bringing together the best talent in the industry to achieve audacious goals focused on making mental health a strength and priority for all.
• We have an obsession to win. We are highly ambitious and passionate about the work that we do.  We take pride in delivering excellence and our personal best and we continuously innovate to uniquely solve our customers’ needs. 
• We are accountable and can rely on each other. We are a team and hold ourselves and each other accountable. We believe in transparent communication and continuous feedback to foster a culture of trust, reliability, and growth. 
• We demonstrate empathy. We have a supportive and diverse culture where we bolster and uplift each other as we pursue our lofty goals. We encourage selflessness and a willingness to support others, fostering a collaborative and respectful environment. 
• We exhibit a bias towards action. This is a fast-paced environment. We jump into problems and initiate solutions. We empower our people to make decisions and experiment, iterate, and repeat until we get it right. 

Modern Health is a fully remote workforce and a hyper-growth company that is often recognized for its excellence, winning awards such as World’s Most Innovative Companies of 2023 by Fast Company, Top 25 Companies of San Francisco 2023, and 2023 Well-Being Trailblazer Award. To protect our culture and help our team stay connected, we require overlapping hours for everyone. While many roles may function from anywhere in the world—see individual job listing for more—US based team members who live outside the Pacific time zone are expected to work at least six hours between 8 am and 5 pm Pacific time each workday.

We are looking for driven, creative, and passionate individuals to join in our mission. An inclusive and diverse culture are key components of mental well-being in the workplace, and that starts with how we build our own team. If you're excited about a role, we'd love to hear from you!

The Role

Maintaining the security and privacy of our users is paramount to Modern Health’s mission. As a Staff Security Engineer, you will operate as a key technical leader, responsible for setting the long-term security vision and strategic direction for our product and cloud environments. You will tackle the most complex, ambiguous security challenges, acting as a force multiplier across the entire engineering organization to ensure our commitment to privacy, security, and compliance remains world-class.

This is a unique opportunity to leverage deep engineering expertise and security domain knowledge to make a direct and massive impact in people's lives. We need a security leader who can mitigate systemic risk by increasing automation, defining secure architectural patterns, and embedding security principles across all product teams.

This role will be part of the Product Security (ProdSec) team, report to the Head of Security, and can be based anywhere in the United States. This is a unique opportunity to be a security leader at a fast growing company, and the work done by this position will lay the foundation for security at Modern Health for years to come!

This position is not eligible to be performed in Hawaii.

What You’ll Do

• Define and drive the strategic roadmap for proactive security vulnerability analysis in web and mobile applications, setting the organizational standard for risk determination and leading complex, company-wide remediations.
• Establish the technical vision and program for integrating robust security controls at every stage of the Software Development Life Cycle (SDLC), championing secure development practices and scalable agile delivery.
• Architect, deploy, and manage defensive security tooling (e.g., SAST, DAST, SCA) and evaluate new industry-leading application security solutions to create a robust, automated security platform.
• Lead the maturation of the Product and Application Security Program by developing and implementing security policies, standards, and metrics to continually raise the security bar and demonstrate compliance.
• Lead collaborative and cross-functional threat modeling initiatives for core systems, new features, and evolving services, ensuring proactive risk identification and structural security improvement.
• Act as a force multiplier across the organization, actively mentoring engineers and driving the adoption of secure coding standards, best practices, and security-focused architecture.
• Routinely test, audit, and assess the security posture of application and cloud infrastructure configurations, focusing on automation and continuous compliance.
• Engage with Cloud Security efforts by partnering with DevOps and Infrastructure teams to assess, improve, and monitor cloud architecture, security policies, and cloud-native controls to ensure secure deployment and operations.
• Develop and advocate for cost-effective, scalable, and complex solutions to address application and product security challenges across the business.

Who You Are

• You are a passionate technical leader with a deep sense of ownership who drives large-scale, cross-functional projects to completion.
• You are an expert in secure software development practices, security-focused architecture, and infrastructure that aligns with product objectives and business needs.
• You drive the adoption of application and product security best practices across engineering teams and influence business-wide security initiatives.
• You have extensive hands-on experience with vulnerability management, secure code review, threat modeling, and industry-standard tools for application and product security.
• You have hands-on experience with at least one scripting language (Python and/or Bash preferred).
• You thrive in fast-paced, collaborative environments, working closely with developers, product managers, and cross-functional stakeholders to secure web and mobile applications.
• You are able to assess, prioritize, and execute on ambiguous and complex projects independently.
• You bring 8+ years of progressive experience in product/application security or a related security-focused engineering field.
• You have demonstrated experience guiding teams and integrating security into agile product delivery.
• You have excellent written and verbal communication skills, capable of articulating technical risk to both engineering and executive audiences.

Bonus Points

• Working at a high growth startup
• Working on SaaS software
• Working in Health Tech
• Software engineering experience

Our Stack

• AWS: ECS and cloud hosting
• Gitlab: CI/CD
• Python: Django, Flask, aiohttp
• Data: PostgreSQL, Redis
• Monitoring: Datadog and Sentry
• IaC: Terraform, Packer

Benefits

Fundamentals:

• Medical / Dental / Vision / Disability / Life Insurance 
• High Deductible Health Plan with Health Savings Account (HSA) option
• Flexible Spending Account (FSA)
• Access to coaches and therapists through Modern Health's platform
• Generous Time Off 
• Company-wide Collective Pause Days 

Family Support:

• Parental Leave Policy 
• Family Forming Benefit through Carrot
• Family Assistance Benefit through UrbanSitter

Professional Development:

• Professional Development Stipend

Financial Wellness:

• 401k
• Financial Planning Benefit through Origin

But wait there’s more…! 

• Annual Wellness Stipend to use on items that promote your overall well being 
• New Hire Stipend to help cover work-from-home setup costs
• ModSquad Community: Virtual events like active ERGs, holiday themed activities, team-building events and more
• Monthly Cell Phone Reimbursement

We use a third-party AI tool (Endorsed) to assist in the initial screening of applications. As part of the evaluation process, we provide Endorsed with job requirements and candidate-submitted applications. Final hiring decisions are made by our human recruitment team, and no automated system makes the ultimate decision regarding hiring. Certain features of the platform may qualify it as an Automated Employment Decision Tool (AEDT) under applicable regulations. We began using Endorsed on May 12, 2025. You can review the independent bias audit report covering our use of Endorsed here. By submitting your application, you acknowledge that your application may be processed by AI systems as part of the screening and selection process. If you have any questions or would like to request a separate review of your application, please contact recruiting@modernhealth.com with "Separate Review Request" in the email subject line.

Below, we are asking you to complete identity information for the Equal Employment Opportunity Commission (EEOC). While we are required by law to ask these questions in the format provided by the EEOC, at Modern Health we know that gender is not binary, and we recognize that these categories do not reflect our employees' full range of identities.