Senior Security Engineer

Position Overview

• Location Type: Not specified
• Job Type: Not specified
• Salary: Not specified

Manifold is a health research infrastructure company dedicated to accelerating precision medicine. We aim to make it ten times faster and one-tenth the cost to generate knowledge, develop better treatments, and improve patient outcomes by enabling researchers to focus on high-impact work. We partner with top-tier healthcare providers, life sciences organizations, and research institutions to unlock real-world data and deliver actionable insights.

Manifold is a Series B funded startup with over 50 employees across North America, backed by prominent investors and healthcare leaders.

About the Role

Manifold is seeking a Security Engineer specializing in Vulnerability Management. This role will focus on identifying, assessing, and mitigating security risks within the organization's systems and networks. The position involves proactive security programs, threat modeling, in-depth technical assessments, and strategic security planning. Key responsibilities include managing the vulnerability lifecycle, driving automation, and ensuring security strategy alignment with industry standards.

Responsibilities

• Identifying and Discovering Vulnerabilities: Utilize techniques such as vulnerability scanning, penetration testing, and bug bounties to uncover system, application, and network weaknesses.
• Analyzing and Assessing Vulnerabilities: Analyze the potential impact and likelihood of exploitation for vulnerabilities to assess overall risk.
• Prioritizing Risks: Prioritize vulnerabilities for remediation based on the threat they pose to organizational assets and data.
• Remediating and Mitigating Vulnerabilities: Collaborate with engineering, IT, and other teams to implement patches, fix vulnerabilities, and deploy mitigation strategies.
• Validating and Monitoring: Validate successful remediation of vulnerabilities and continuously monitor systems for new or re-emerging threats.
• Driving Automation and DevSecOps: Automate vulnerability scanning, assessment, and reporting processes to enhance efficiency and scalability, and integrate security into the software development lifecycle.
• Managing Sensitive Data: Maintain security controls and compliance for handling sensitive customer data, including clinical records, HIPAA-protected health information, and Federal data sets.
• Collaborating with Other Teams: Partner with Engineering and Corporate IT to improve the overall security posture.
• Continuous Learning: Stay current with the latest security threats, vulnerabilities, and best practices.

Requirements

• Strong understanding of security principles, network architecture, and operating systems.