Security Engineer

At Eko, we’re dedicated to providing healthcare professionals with industry leading digital tools to hear and understand their patients’ hearts and lungs. With our platform, clinicians can detect cardiopulmonary disease with higher accuracy, diagnose with more confidence, manage treatment effectively, and ultimately give their patients the best care possible.  

With over $165M in funding from partners like 3M and the Mayo Clinic, Eko has become one of the fastest growing digital health companies, doubling our customer base in the last year to over 500,000 clinicians across 4,000 U.S. hospitals. We’ve built a tremendously talented, diverse, and mission driven team and are proud to be certified as a Great Place to Work®. Together we are committed to investing in each other and our mission to ensure all patients have access to high quality care.

We are seeking a well rounded Security Engineer to join our lean team. Reporting directly to the Senior Director of Security and Technology, you'll be responsible for designing, owning and executing security initiatives across our dynamic, cloud-native infrastructure, driving security improvements at speed and scale.  Additionally, you will optimize our controls and best practices to ensure consistent security standards and documentation across the organization. If you are energized by a scrappy growing environment and passionate about proactive defense and continuous improvement, we want to hear from you.

• Work with Engineering and Data Science teams on embedding security into products, improving secure development processes, managing vulnerabilities, and improving security maturity in an FDA compliant environment
• Command security investigations and incidents, ensuring that any serious threats and risks are understood, mitigated, and learned from with speed and professionalism.
• Lead security and privacy compliance initiatives, and ongoing audit support
• Build and maintain security automation for detection, response, and mitigation, and evaluate new security technologies and tools
• Monitor security alerts, continuously tune, and develop dashboards
• Facilitate threat modeling, risk assessments, and ongoing tracking across all stacks
• Perform vendor security reviews and support customer security questionnaires
• Maintain security policies, trainings, security guidance, and compliance collateral
• Lead projects on achieving new security certifications and compliance standards
• Significantly contribute to company security and technology strategy and architecture

• 5+ years of experience across Infosec, IT, Infra/SRE, and/or Incident Response.
• Experience in software development with focus on Security
• Familiarity with AWS and Google Suite Administration 
• Security Tools & Techniques Knowledge – Solid understanding of security tools and technologies such as SIEM, EDR, IDS/IPS, NDS, and security orchestration platforms.
• Incident Leadership Experience – You’ve operated as an incident commander and have flexed into engineering work as needed. You’re proficient in locating, convening, and coordinating responders to progress and resolve incidents.
• Investigations Expertise – You have investigated threats in both enterprise and production environments, taking each instance from identification to resolution while prioritizing risk.
• Incident Response Expertise – Proficiency in applying the Incident Response 7-step process, Cyber Kill Chain, and CIA Triad in execution.
• Experience managing security and privacy compliance control frameworks and reviews including HIPAA, SOC2, SOX, PCI, ISO, GDPR, OWASP, NIST
• Certifications (ie CISSP, CIPP, OSCP, GSEC, AWS Certified Security - Specialty, CISM, GCLD, GCPN, etc.)

• A Competent Project Manager – You have managed small to medium sized cross organizational projects successfully achieving objectives, budgets and timelines
• A Detailed Thinker – You enjoy exploring details and understanding their impact.
• An Eager Problem Solver – You are drawn to solving issues rather than avoiding them.
• Team-Oriented – You enjoy team accomplishments and hold yourself to high standards to enable group success.
• Driven to Make Change – You instinctively ask how you can improve a situation rather than waiting to be prompted.
• Calculated in Taking Risks – You move fast while making thoughtful, reasonable decisions to take action and build capabilities efficiently.

• Eko was recognized by “Great Place to Work” in 2020 and 2021
• Paid-time off
• Medical/Dental/Vision, Disability + Life Insurance
• One Medical membership
• Parental Leave
• 401k Matching
• Work from home equipment stipend
• Flexible schedules
• Wellness programs (Wellness Wednesdays, Time off)
• Wellness perks (Headspace, Ginger, Aaptiv, Physera) 
• Learning and Development stipend

Eko is elevating the way clinicians detect and monitor cardiac and respiratory disease by bringing together advanced sensors, patient and provider software, and AI-powered analysis. Its FDA cleared platform is used by tens of thousands of clinicians treating millions of patients around the world, in-person, and through telehealth. The company is headquartered in Oakland, California and privately-held, with investments from ARTIS Ventures, NTT Venture Capital, DigiTx Ventures, Mayo Clinic, Sutter Health and others.  

Eko is proud to be an equal opportunity employer and welcome people of different backgrounds, experiences, abilities and perspectives. We celebrate diversity and are committed to building a diverse and inclusive team.