Security Engineer

Security Engineer

At Eko, we're dedicated to providing healthcare professionals with industry leading digital tools to hear and understand their patients' hearts and lungs. With our platform, clinicians can detect cardiopulmonary disease with higher accuracy, diagnose with more confidence, manage treatment effectively, and ultimately give their patients the best care possible.

With over $165M in funding from partners like 3M and the Mayo Clinic, Eko has become one of the fastest growing digital health companies, doubling our customer base in the last year to over 500,000 clinicians across 4,000 U.S. hospitals. We've built a tremendously talented, diverse, and mission-driven team and are proud to be certified as a Great Place to Work. Together we are committed to investing in each other and our mission to ensure all patients have access to high quality care.

The Growth Marketing Team at Eko is the expansion engine of our business and responsible for driving the business forward through both digital and offline channels. Our team is highly cross-functional, and we work closely with other teams in the organization. We are a group of thoughtful, strategic, and analytical thinkers who are committed to sharing Eko with the world.

We are seeking a well-rounded Security Engineer to join our lean team. Reporting directly to the Senior Director of Security and Technology, you'll be responsible for designing, owning and executing security initiatives across our dynamic, cloud-native infrastructure, driving security improvements at speed and scale. Additionally, you will optimize our controls and best practices to ensure consistent security standards and documentation across the organization. If you are energized by a scrappy growing environment and passionate about proactive defense and continuous improvement, we want to hear from you.

As Security Engineer at Eko, You Will :

Work with Engineering and Data Science teams on embedding security into products, improving secure development processes, managing vulnerabilities, and improving security maturity in an FDA compliant environment

Command security investigations and incidents, ensuring that any serious threats and risks are understood, mitigated, and learned from with speed and professionalism.

Lead security and privacy compliance initiatives, and ongoing audit support

Build and maintain security automation for detection, response, and mitigation, and evaluate new security technologies and tools

Monitor security alerts, continuously tune, and develop dashboards

Facilitate threat modeling, risk assessments, and ongoing tracking across all stacks

Perform vendor security reviews and support customer security questionnaires

Maintain security policies, trainings, security guidance, and compliance collateral

Lead projects on achieving new security certifications and compliance standards

Significantly contribute to company security and technology strategy and architecture

As Security Engineer at Eko, You Have :

5+ years of experience across Infosec, IT, Infra / SRE, and / or Incident Response

Experience in software development with focus on Security

Familiarity with AWS and Google Suite Administration

Security Tools & Techniques Knowledge Solid understanding of security tools and technologies such as SIEM, EDR, IDS / IPS, NDS, and security orchestration platforms.

Incident Leadership Experience You've operated as an incident commander and have flexed into engineering work as needed. You're proficient in locating, convening, and coordinating responders to progress and resolve incidents.

Investigations Expertise You have investigated threats in both enterprise and production environments, taking each instance from identification to resolution while prioritizing risk.

Incident Response Expertise Proficiency in applying the Incident Response 7-step process, Cyber Kill Chain, and CIA Triad in execution.

Experience managing security and privacy compliance control frameworks and reviews including HIPAA, SOC2, SOX, PCI, ISO, GDPR, OWASP, NIST

Certifications (ie CISSP, CIPP, OSCP, GSEC, AWS Certified Security - Specialty, CISM, GCLD, GCPN, etc.)

Benefits and Perks We Offer :

Eko was recognized by "Great Place to Work" in 2020 and 2021

Paid-time off

Medical / Dental / Vision, Disability + Life Insurance

One Medical membership

Parental Leave

401k Matching

Work from home equipment stipend

Flexible schedules

Wellness programs (Wellness Wednesdays, Time off)

Wellness perks (Headspace, Ginger, Aaptiv, Physera)

Learning and Development stipend

140,000 - $155,000 a year

Eko is elevating the way clinicians detect and monitor cardiac and respiratory disease by bringing together advanced sensors, patient and provider software, and AI-powered analysis. Its FDA cleared platform is used by tens of thousands of clinicians treating millions of patients around the world, in-person, and through telehealth. The company is headquartered in Oakland, California and privately-held, with investments from ARTIS Ventures, NTT Venture Capital, DigiTx Ventures, Mayo Clinic, Sutter Health and others.

Eko is proud to be an equal opportunity employer and welcome people of different backgrounds, experiences, abilities and perspectives. We celebrate diversity and are committed to building a diverse and inclusive team.