Staff Software Engineer - Product Security

Staff Software Engineer for product security in Maven Clinic's Core Engineering group, acting as the company's technical authority on security engineering. The engineer builds platform infrastructure for HIPAA, SOC 2 and ISO 27001 compliance, identity and access systems on Okta, GCP IAM, Auth0 and OPA, anomaly detection, Zero Trust and least-privilege enforcement, and automated evidence collection; creates self-service security tooling in GitLab CI/CD and Terraform covering SAST, DAST, SBOMs and access reviews; and leads threat modelling, PHI data protection and incident response work.

Maven wants eight or more years of software engineering, three in security infrastructure or AppSec, strong Python, TypeScript, Go or Rust, cloud security depth (GCP preferred), and Kubernetes and Terraform. The role is hybrid from New York or other hub cities.