Security Engineer

Our Purpose: 

 

Arrive Health (formerly RxRevu) is on a mission to disrupt our broken healthcare system and clear the way for better health. We are a healthcare technology company that truly believes people should not have to choose between managing their health and meeting their basic needs, which is why we are committed to doing the work needed to bridge technology gaps within healthcare systems in order to deliver clear, accurate information at the point of care. 

 

We improve access to the most affordable, quality care by delivering patient-specific cost and coverage data to providers, care teams, and patients. Collaborating with premier health systems, pharmacy benefit managers, payers, and healthcare IT vendors, Arrive Health is clearing the way for better health by reducing friction in care workflows and enabling meaningful conversations about access to care. 

 

The Platform:

 

Our technology solutions invite proactive conversations between patients, providers, and care teams. We deliver accurate medical and pharmacy cost and coverage data to integrated workflows to improve patient access to affordable, convenient treatment. Through intuitive technology and reliable insights, we’re helping physicians arrive at the best possible option for patients — one that is effective, accessible, and affordable. Arrive Health has a successful track record of helping millions of patients get the care they need at prices they can afford.


As a member of our incredible team, here is what you’ll do: 

 

Arrive Health is hiring a Security Engineer to help with our security and compliance efforts. This is a unique opportunity to make an immediate impact and join a fast-moving healthcare IT disruptor.

The successful candidate will work closely with colleagues on the Development, DevOps, Client Services, Analytics and Data Science teams and with other employees on associated projects. Candidates should be self-driven and interested in taking ownership of new projects and features.

 

Among other things, here is what you will do:

  • Implement and manage AWS security tooling.
  • Ensure workstation security using MDM.
  • Manage the vulnerability program and ensure remediation efforts on the engineering and infrastructure side utilizing static and dynamic vulnerability and remediation tools.
  • Perform access control reviews, facility access, and system/service access rights.
  • Maintain system information, access inventory, firewall configuration and network security configurations.
  • Support annual, quarterly, monthly, and ad hoc risk assessments.
  • Complete weekly monitoring log reviews using SIEM and continually optimizing and managing this solution.
  • Support the testing of incident and disaster recovery plans.
  • Support the IS Compliance Officer on our security assessments focused on HIPAA and HITRUST.
  • Support annual security training and ongoing security awareness.
  • Manage IT vendor relationship and partner on ad hoc needs.
  • Apply knowledge of application security, including knowledge of OWASP's top 10 web application and API vulnerabilities, as well as SANS top 25 vulnerabilities.
  • Identify and address security vulnerabilities through hardening efforts of the security of workstations, cloud servers such as EC2 instances and containers, and Mac systems.
  • Script in one or more languages to further automate functions and processes.

 

Ideal qualifications we seek in a candidate: 

  • 3+ years in the security field or related field with hands on applied experience.
  • Familiar with a security framework such as NIST, ISO or HITRUST.
  • Experience with compliance efforts such as writing policies and procedures and establishing process.
  • Strong attention to detail, with excellent written and verbal communication skills.
  • Strong interpersonal skills and an ability to build and maintain productive, positive relationships with team members and other employees.
  • Ability to solve problems with limited input.
  • A desire to learn and grow in a fast-paced environment.

 

Diverse teams build better products: At Arrive Health, we recognize that people come with a wealth of experience and talent beyond just the requirements of a job. If your experience is close to what you see listed here, please still consider applying as we are often recruiting for many positions and can work together to identify the correct role. Diversity of experience and skills, combined with our passion for healthcare, is what continues to drive us to innovate. We encourage people from all backgrounds to apply to our positions.


This is a full-time remote position, with the option of traveling to cowork in our Denver, CO headquarters a few times a year. The successful candidate must already have authorization to work in the United States. At this time, Arrive Health does not offer sponsorship. All candidate information will be held in confidence, and in accordance with EEOC guidelines.

 

Perks and Benefits: Our people are our most important asset, and we want to support our employees by offering a competitive and robust benefits package. We strive to be a preferred place and our perks and benefits include a variety of offerings tailored to support our amazing people in the most meaningful ways.

 

  • Medical insurance with 90% employer paid premiums for our employees.
  • Vision and dental covered at 100%
  • Health saving account with employer contribution and flexible spending accounts
  • 401k and company stock options
  • Paid Leaves of absence, LTD and life insurance plans
  • Paid maternity and paternity leaves at 100% 
  • Inclusive paid time off policy
  • 9 company holidays and 2 floating holidays
  • 6 company disconnect days so all our employees can prioritize their mental health and wellbeing 
  • Remote first company
  • Denver office coworking space with company-paid parking
  • Gym reimbursement through Anthem 
  • Home office setup for new employees
  • Monthly snack box


Anticipated hiring range for this position:

$126,000 to $150,000

IT

Remote (United States)

Share on:

Terms of servicePrivacyCookiesPowered by Rippling