Senior Security Engineer

About this role

On this journey for over 12 years, Qventus is leading the transformation of healthcare. We enable hospitals to focus on what matters most: patient care. Our innovative solutions harness the power of machine learning, generative AI, and behavioral science to deliver exceptional outcomes and empower care teams to anticipate and resolve issues before they arise. Our success in rapid scale across the globe is backed by some of the world's leading investors.

At Qventus, you will have the opportunity to work with an exceptional, mission-driven team across the globe, and the ability to directly impact the lives of patients. We’re inspired to work with healthcare leaders on our founding vision and unlock world-class medicine through world-class operations. #LI-MB1 About the Role We're looking for a Security Engineer to own the design and buildout of Qventus' cloud and data security tooling.

This role will be responsible for driving engineering security policy, collaborating with internal Qventus teams, and owning the buildout of cloud security tooling to support and improve Qventus' security posture. Key Responsibilities: Own the design, buildout, and priorities of Qventus' cloud and data security engineering Collaborate with teams to automate security guardrails, not gates Know where our sensitive data lives and develop controls for validating secure access Partner with engineering teams so security is understood and owned, not imposed What We’re Looking For Demonstrated ability to drive complex, ambiguous projects forward across teams collaboratively, and to communicate challenges and tradeoffs clearly Foundational knowledge across cloud security fundamentals: threat models, IAM, networking, encryption, access controls, phishing, and misconfiguration risks Working knowledge with one or more categories of cloud and data security tooling like CNAPP / CSPM (Orca, Wiz, Upwind), DSPM, CIEM, or SSPM Comfort with automation and scripting, whether in Python, Go, or Bash, and how to document and implement policy with those tools Experience implementing policy-as-code and helping integrate it into development processes, whether CI / CD, Kubernetes (via OPA), or other infrastructure-as-code tooling Familiarity with securing containerized workloads on Kubernetes A track record handling regulated data (HIPAA) in cloud data platforms like Databricks or Snowflake Compensation for this role is based on market data and takes into account a variety of factors, including location, skills, qualifications, and prior relevant experience.