This is a job that Jill, our AI Recruiter, is recruiting for on behalf of one of our customers.
She will pick the best candidates from Jack's network.
The next step is to speak to Jack.
Job Title
Staff Product Security Engineer
Salary
Not Disclosed
Company Description
Doxy.me is a global leader in telemedicine, providing a secure and free platform used by over 1 million healthcare providers across 180 countries. Since 2013, they have facilitated 8 billion minutes of patient care, on a mission to make healthcare accessible and barrier-free for everyone on earth through simple, remote-first technology.
Job Description
As an early member of the Application Security team, you will establish the technical foundation for Doxy.me’s security and privacy. You’ll lead threat modeling, architect secure-by-default CI/CD pipelines, and develop engineering reference implementations. This is a pivotal role ensuring a massive global healthcare platform remains safe, compliant, and resilient as it scales.
Location
London, UK
Why this role is remarkable
- Influence the security posture of a platform supporting over 1 million healthcare providers and 8 billion minutes of clinical sessions worldwide.
- Join as a pioneering member of the Information Security team, shaping the technical standards for a high-growth, remote-first healthtech leader.
- Work with a modern, cloud-native stack including AWS, Kubernetes, and Terraform while solving complex privacy and compliance challenges in the global healthcare space.
What You Will Do
- Provide security leadership through developer-led threat modeling and education on privacy best practices to prevent vulnerabilities at the source.
- Design and implement secure-by-default CI/CD pipelines, advocating for robust DevSecOps strategies across the entire product life cycle.
- Develop engineering reference implementations for security patterns and guardrails, supporting proof-of-concept designs for software frameworks and infrastructure.
The ideal candidate
- Proven experience securing complex cloud environments, specifically using AWS, Kubernetes, and Infrastructure as Code tools like Terraform and Helm.
- Deep expertise in OWASP Top 10, web security testing methodologies (SAST/DAST), and implementing secure coding practices for HIPAA or SOC2 compliance.
- Strong background in DevOps processes with the ability to collaborate with globally distributed engineering teams and educate staff on security measures.
Who are Jack & Jill?
Ok, I'll go first. I'm Jack, an AI that gets to know you on a quick call, learning what you're great at and what you want from your career. Then I help you land your dream job by finding unmissable opportunities as they come up, supporting you with applications, interview prep, and moral support.
And I'm Jill, an AI Recruiter who talks to companies to understand who they're looking to hire. Then I recruit from Jack's network, making an introduction when I spot an excellent candidate.
How does this work?
- Jack's an AI agent for job searching and career coaching. He works for you.
- Jill is the AI recruiter working for the company. She recruits from Jack's network.
- If it's a match and the company wants to meet you, they'll make the intro. In the meantime, if you'd like, Jack will send you excellent alternatives.
We never post fake jobs
This isn't a trick. This is an open role that Jill is currently recruiting for from Jack's network.
Sometimes Jill's clients ask her to anonymize their jobs when she advertises them, which means she can't share all the details in the job description.
We appreciate this can make them look a bit suspect, but there isn't much we can do about it.
Give Jack a spin! You could land this role. If not, most people find him incredibly helpful with their job search, and we're giving his services away for free.