Senior Security Engineer

Opala develops healthcare products that tackle the most complex data challenges faced by payers and providers. As a startup originating from a major healthcare plan in the Northwest, we combine deep health-tech expertise with top-tier data and software engineering talent to create products our customers find meaningful and valuable. Our data products empower payers and their partners to find timely insights and take action in areas like value-based care analytics, interoperability compliance, and real-time streaming of clinical data.

We're hiring a Senior Security Engineer to own the day-to-day operation of Opala's security controls across Azure and AWS. You will report to the Director of Security & Compliance and work side by side with our Platform and Data teams. You'll both lead by doing, designing and implementing guardrails, pipeline security checks, and supply chain protections, and lead by influence, building paved roads that make it easy to ship securely in a healthcare data environment. This is a hands-on role for someone who takes ownership, drives work to completion, and doesn't wait to be told what's next. In your first 90 days you'll take ownership of cloud posture findings and the security testing that gates changes to production.

Responsibilities

• Own the operation of Opala's cloud security controls in Azure and AWS, including cloud security posture and vulnerability remediation. Drive findings to closure by triaging, assigning owners, following up with engineering teams, and reporting status to leadership.
• Confirm that appropriate security testing has been completed for each change (e.g., SAST, DAST, dependency and vulnerability scanning). Where testing is missing, recommend solutions and implement the tooling hands-on, including in CI/CD pipelines (GitHub Actions) and software supply chain protections.
• Design and implement Infrastructure as Code guardrails, partnering with the Platform and Data teams so features and data platform changes (e.g., Databricks) are secure and compliant by design.
• Integrate logging and monitoring with our MDR/SOC vendor (Arctic Wolf), tune alerting, and investigate security incidents, documenting root cause and remediation.
• Automate evidence collection for compliance controls (e.g., in Drata), support the annual audit cycle, and coordinate third-party penetration testing and remediation.
• Research security enhancements and advise leadership on emerging risks.

• 5+ years in cloud security, DevSecOps, or platform engineering roles.
• Experience securing both AWS and Azure, with working knowledge of Microsoft Entra ID, AWS IAM, Microsoft Defender for Cloud, and AWS Security Hub.
• Solid experience with Infrastructure as Code (e.g., Terraform) and scripting for automation.
• Experience with SAST/DAST, software supply chain security, and API security.
• Ability to collaborate closely with developers and product squads while setting security best practices.

• Security and cloud certifications such as AWS Certified Security - Specialty, AWS Certified Solutions Architect - Professional, Azure AZ-500 (Security Engineer), and Azure AZ-305 (Solutions Architect Expert).
• Experience using or administering compliance automation tools (Drata or similar GRC platforms). Prior experience is not required; we expect you to automate evidence collection.
• Experience working with managed security (MDR/SOC) providers.
• Experience with immutable infrastructure practices.
• Experience in regulated industries (healthcare, fintech, etc.).
• Additional scripting languages such as PowerShell or Python.
• Exposure to enterprise architecture frameworks such as TOGAF.

• The Seattle base salary range for this full-time position is $163k-$192k. Within the range, individual pay is determined by work location and additional factors, including job-related skills, experience, and relevant education or training.  
• Benefits include medical, dental, vision, life and AD&D insurance, EAP, short-term and long-term disability, 16 days PTO, 8 paid holidays, fully paid holiday closure, parental and family medical leave, 401k, stock options and annual bonuses and salary increases based on merit.

• At Opala, we believe that diversity and inclusivity are critical to our success. We encourage and value diverse perspectives and experiences, and we believe that they are essential for driving innovation and creating products that meet the needs of our diverse customer base.  

Opala is an equal opportunity employer and makes employment decisions on the basis of merit.  We are committed to providing a workplace free from harassment and discrimination. We celebrate the unique differences of our employees because that is what drives curiosity, innovation, and the success of our business. We do not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, gender identity or expression, age, marital status, veteran status, disability status, pregnancy, parental status, genetic information, political affiliation, or any other status protected by the laws or regulations in the locations where we operate. Accommodations are available for applicants with disabilities.