Sr. Security Engineer (Remote)

Rula•Los Angeles, CA

23h•Remote

About The Position

The Security Team at Rula is responsible for ensuring the protection of patient data and all of the technology behind our platform. We maintain close partnerships with Engineering and Product teams, but interface with everyone across the company to ensure that security is an organic and adopted element of our culture. In this role, you’ll have the opportunity to enhance the security of cloud infrastructure. Overall, you’ll encounter endless learning opportunities and pursue projects that will leverage and refine your skills. More importantly, the work you do will help ensure the best outcomes for patients as we strive to make mental healthcare work for everyone. Base principles of the Security Team We commit to high ethical standards We focus on pragmatic assessments over assumptions We hold ourselves accountable to team and company standards We prioritize the relative ‘High-impact, low-effort’ security risks We assume best intentions in all of our partners We empower other teams with actionable data to make sound security decisions We value collaboration and practical experience over titles

Requirements

4+ years of demonstrated experience as an infrastructure security or cloud security engineer
3+ years of AWS engineering experience (security or non-security role)
Expertise using an AWS SDK for Python, Javascript, or Go for regular engineering tasks
Proficiency using Infrastructure-as-Code tools, such as Terraform or CloudFormation
Demonstrated ability in managing or developing security standards around Kubernetes and/or EKS

Nice To Haves

Experience in healthcare industry, with functional understanding of HIPAA requirements and how they apply to infrastructure security practices
Hands-on prowess securing GCP environments, including IAM and cloud security posture management across GCP services
Expertise identifying and mitigating security risks introduced by AI/ML workloads in cloud infrastructure, such as securing model serving pipelines, training data access controls, and GPU/compute resource isolation
Experience with Web Application Firewall (WAF) tuning and alerting
Demonstrated success defining, implementing, and refining cloud organization-level policy controls such as Service Control Policies (SCPs) or GCP Organization Policies
Established history of running security threat models against production cloud infrastructure

Benefits

100% remote work environment: Working hours to support a healthy work-life balance, ensuring you can meet both professional and personal commitments (must be based in United States, currently not hiring in Hawaii)
Attractive pay and benefits: Full transparency of pay ranges regardless of where you live in the United States
Comprehensive health benefits: Medical, dental, vision, life, disability, and FSA/HSA
401(k) plan access: Start saving for your future
Generous time-off policies: Including 2 company-wide shutdown weeks each year for self-care (for most employees)
Paid parental leave: Available for all parents, including birthing, non-birthing, adopting, and fostering
Employee Assistance Program (EAP): Support for your mental and physical health
New hire home office stipend: Set up your workspace for success
Quarterly department stipend: Fund team-building activities or in-person gatherings
Wellness events and lunch & learns: Explore a variety of engaging topics
Community and employee resource groups: Participate in groups that celebrate employee identity and lived experiences, fostering a sense of community and belonging for all