Maven Clinic

More roles at Maven Clinic

Staff Security Engineer, Detection & Response

Work from home

Remote role where the employee must remain based in a particular country.

Listed for United States

Source: the job board's country tag. The advert itself does not name United States.

Employer listed it 5 weeks ago · Added 4 weeks ago

Been open since 5 weeks ago, still being checked, but it has been live a while.

Salary

$221k to $299k per year

Location

Listed for United States

Timezone

Not stated

Contract

Full-time

Experience

Lead

What the advert says

Quoted word for word from the employer's advert. Where it says nothing, we say so.

Working hours: Not mentioned in the advert
Where you can work from: Maven embraces a flexible hybrid work model.
Contract: These benefits are applicable to Maven Clinic Co., US-based, full-time employees only.
Experience asked for: Not mentioned in the advert
Pay: The base salary range for this role is $221,000 - $299,000 per year.

Remote flexibility

Work from home

This is a remote role, but the employee must be based in United States. It is work from home rather than work from anywhere.

What the employer says

Source listing states candidate location: "New York, NY; Remote, US (Hub cities), New York, NY"
Job description states: "based in Boston"

What Nomaders makes of it

Payroll and tax are likely handled in that country only

The quotes above are the employer's own words; the reading is ours. Always check the original listing and employment terms before working from another country.

About the role

Maven Clinic is the world's largest virtual clinic for women and families on a mission to make healthcare work for all of us. Through Maven Enterprise, the company partners with more than 2,300 employers and health plans to provide end-to-end women's and family health programs spanning fertility and family building, maternity and newborn care, parenting and pediatrics, and menopause and midlife — improving clinical outcomes, reducing healthcare costs, and expanding equitable access to high-quality care at scale. Through its consumer platform, Maven provides direct access to virtual care across 30+ specialties, as well as dedicated hormone and GLP-1 care programs purpose-built for women. Founded in 2014 by CEO Kate Ryder, Maven Clinic has raised more than $425 million from leading healthcare and technology investors including General Catalyst, Sequoia, Dragoneer Investment Group, Oak HC/FT, StepStone Group, Icon Ventures, and Lux Capital. Recognized for innovation and industry leadership, Maven has been named to the TIME100 Most Influential Companies, CNBC Disruptor 50, Fast Company's Most Innovative Companies, and FORTUNE Best Places to Work. Learn more at mavenclinic.com

An award-winning culture working towards an important mission – Maven Clinic is a recipient of over 30 workplace and innovation awards, including:

TIME 100 Most Influential Companies (2023, 2026)

Fortune Change the World (2024)

CNBC Disruptor 50 List (2022, 2023, 2024)

Fortune Best Workplaces for Millennials (2024)

Fortune Best Workplaces in Health Care (2024)

Fast Company Most Innovative Companies (2020, 2023)

Fortune Best Workplaces NY (2020, 2021, 2022, 2023, 2024)

About the Role

You'll own our Incident Detection and Response program, including threat modeling our systems and codebase and directing the investigation when something does happen. You'll join a team that includes an AppSec-focused engineer and an infrastructure-focused engineer, and you'll guide technical direction and judgment calls. You'll spend most of your time finding bugs in our code and gaps in our SDLC before they become incidents, then building and implementing or project managing the fixes yourself. AI is a growing part of that surface, and as our reliance on LLMs, AI-generated code, and agents expands, you'll be responsible for understanding and managing the risk that comes with it.

What You'll Own

Investigation & Technical Direction

Lead investigations hands-on. When an incident or suspicious finding comes up, you pull the logs, build the narrative of what happened, and advise business and engineering leaders on next steps.

Read production code when needed to understand what's actually happening.

Proactive Hunting & SDLC Hardening

When you're not investigating, hunt for bugs in our codebase and weaknesses in our SDLC where problems can slip past existing controls.

Propose and implement fixes yourself, or manage the resolution with the right teams, whether that's a specific code fix, a broader process or control change.

Partner with our Product Security Engineer on golden paths when a weakness points to a systemic gap.

Detection Engineering

Own and tune the detection logic running through 7AI, validating its investigations and escalations and setting the criteria for what triggers an alert.

Close gaps in logging and visibility so the tooling has the right data to work with.

Managing AI Risk

Help us understand and manage the security risks that come with our growing use of LLMs and AI tooling, both in what we build and what we adopt internally.

Requirements

The employer hasn't listed requirements separately, they're described in the role summary above and on the original listing.

Benefits

·Maven for Mavens: access to the full platform and specialists, including care for mental health, reproductive health, family planning and pediatrics.
·Whole-self care through wellness partnerships
·Hybrid work, in office meals, and work together days
·16 weeks 100% paid parental leave and new parent stipend (for Mavens who've been with us for 1 year+)
·Annual professional development stipend and access to a personal career coach through Maven for Mavens

How to apply

1Check the flexibility label above, work from home, matches where you plan to live and work.
2Tailor your CV to the role at Maven Clinic, mentioning your remote working experience.
3Apply directly on the employer's careers page using the button below. Nomaders never handles your application.

Found 1mo ago. Last checked today. Always confirm the details on the original posting, salary and location can change after publication.

Listing sourced from Company boards.