Security Engineer

About The Company Curative is revolutionizing the health insurance landscape by creating innovative employer-based plans aimed at removing financial barriers and making healthcare truly accessible. Our unique model offers a single monthly premium with $0 copays and $0 deductibles, supported by our recent $150 million Series B funding and a valuation of $1.275 billion. As a rapidly scaling organization, we invest heavily in AI-powered services, deeper member engagement, and a smart network tailored for today’s workforce. Our core philosophy is that healthcare only works when people can actually use it, guiding every decision we make—from plan design and member support to team collaboration. We are committed to meaningful work within a fast-moving, experimental, and deeply caring team environment. If you are passionate about transforming health insurance and want to be part of an innovative company, Curative offers an exciting opportunity to contribute to impactful change in healthcare delivery. About The Role As a senior hands-on Security Engineer at Curative, you will be integral to building and securing our proprietary software systems that manage sensitive health data, member information, and operational infrastructure. Unlike traditional insurers, we develop our own software platforms for members, providers, and operations, giving us the unique ability to implement security measures tailored to our systems. In this builder-focused role, you will take end-to-end ownership of our technical security architecture, including threat detection, incident response, AI ecosystem security, and infrastructure hardening. Your work will involve embedding security into our software development lifecycle, securing our cloud environment, and protecting internal tools used by our workforce. You will collaborate closely with software, platform, infrastructure, data, and compliance teams, reporting directly to the VP of InfoSec and IT. This remote role requires a proactive, innovative mindset with a focus on automation, AI integration, and scalable security solutions to support our rapid growth and evolving technological landscape. Qualifications 8+ years in security engineering with demonstrated growth into technical leadership rolesProficiency in software engineering or scripting languages such as Python, Go, Typescript, or Shell scriptingDeep expertise in at least one core domain: AI Security, Product Security, or Detection & ResponseHands-on experience with SIEM tools like DataDog, ELK, or equivalentExtensive knowledge of AWS security and IAM best practicesSolid understanding of secure SDLC practices, threat modeling, SAST/DAST toolsExperience working with AI/LLM APIs and understanding of associated security risksFamiliarity with endpoint detection and response (EDR), DLP, and vulnerability managementExperience with containerized workloads and Kubernetes securityProven ability to mentor and develop engineering teams Responsibilities Own the strategy and implementation of Detection and Response platforms, including onboarding log sources from cloud, containers, endpoints, and SaaSDevelop and maintain Security Orchestration, Automation, and Response (SOAR) tools, integrating AI agents for alert triage and investigation enrichmentLead incident response efforts for complex threats, including creating runbooks, conducting post-incident reviews, and designing business continuity and disaster recovery exercisesEmbed security into the software development lifecycle through threat modeling, secure design reviews, and automated security gates in CI/CD pipelinesManage vulnerability programs at host and application levels, tracking remediation effortsDesign and implement AI-powered security tools for threat detection, anomaly identification, and automated response workflowsDefine and enforce security models for LLM-based systems, including hardening against prompt injection and data exfiltrationMaintain and improve AWS security posture, enforce baseline configurations, and collaborate with IT on protecting enterprise assetsEngineer and operate endpoint security solutions like EDR, DLP, and IAM architectureMentor junior and mid-level security engineers, fostering team growth and capability developmentEstablish security engineering standards and collaborate across teams to translate threat intelligence into detection and hardening strategies Benefits Curative Health Plan with 100% employer-covered premiums for employees and 50% coverage for dependents, including $0 copays and $0 deductiblesComprehensive preventive and primary care servicesMental health support and personalized care navigationPrograms for chronic conditions such as diabetes, hypertension, and weight managementMaternity and family planning assistanceAccess to 24/7/365 Curative Telehealth servicesExtensive dental and vision coverageEmployer-provided life and disability insurance with options for additional supplemental coverageFlexible spending accounts (FSAs)Generous PTO policy plus 11 paid company holidays annually401(k) retirement plan for full-time employeesUp to 12 weeks of paid parental leave, based on role eligibility Equal Opportunity Curative is an equal opportunity employer committed to fostering an inclusive environment. We welcome applicants of all backgrounds and experiences without regard to race, color, religion, gender, gender identity or expression, sexual orientation, national origin, age, disability, or veteran status. We believe diversity drives innovation and invite all qualified candidates to apply and join our mission to transform healthcare for the better.