Security Engineer

Healthcare is complex. We’re here to change that.

RVO Health is a health technology company on a mission to make health easier to navigate, more accessible, and more affordable for everyone.

Here, you'll help over 40 million people every month, with a team that genuinely cares about the work and each other.

AT A GLANCE

As part of our RVO Health Security team, you will play a major part in strategic initiatives that improve our security posture and protect our sensitive data. You will work in a collaborative Agile environment, working closely with the business, IT, and engineering teams. You will apply your skills in a highly dynamic, innovative, cloud-native environment with a strong security-minded culture.

Where You'll Be

Location: Charlotte Metro Area (Fort Mill, SC) | Hybrid

We believe great collaboration happens when we're together, solving problems, learning from each other, and connecting as a team. That's why we’re in our offices Tuesday through Thursday each week. You are welcome to work remotely Mondays and Fridays if you wish.

Office address: 1101 Red Ventures Dr Fort Mill, SC 29707

What You’ll Do

• Design, implement, and maintain security controls and architectures to protect the company's cloud infrastructure, applications, and data from cyber threats.
• Improve our cloud security posture and vulnerability management program — pull-request scanning, triage and tracking of findings to closure across engineering teams, and coverage and license optimization.
• Build and enforce software supply chain controls across the developer toolchain — package, dependency, and extension guardrails, with enforcement thresholds tuned to reduce noise rather than generate it.
• Extend security into CI/CD pipelines, including the emerging problem of governing AI-authored code at the pipeline chokepoint.
• Build automation, internal tooling, and integrations against our developer platform and security stack so that security controls are self-service rather than ticket-driven.
• Partner with Platform & Software Engineering teams to create visibility and awareness of security issues and work to prioritize their resolution in a collaborative way.
• Perform security assessments, including code reviews and application security testing, to identify and mitigate risk in new and changing systems.
• Participate in a weekly on-call rotation for managed detection and response escalations; investigate potential threats, respond to security incidents, and perform root cause analysis.
• Develop and maintain security standard operating procedures and policies in accordance with industry best practices and regulatory requirements (e.g., HIPAA, NIST CSF).