🛠 Tech Stack

💼 About This Role

You'll own and build Stedi's security program end-to-end, working at the intersection of engineering, legal, and product. Your core impact will be operationalizing security as job zero across every function, scaling from a strong foundation of SOC 2, HIPAA, and soon HITRUST R2 certifications. You'll represent Stedi to customers, partners, and regulators while maintaining a builder culture with hands-on technical involvement.

🎯 What You'll Do

• Own and build Stedi's security program end-to-end, including policies, controls, and tooling.
• Be a strong hands-on contributor and build a roadmap for scaling the security function.
• Advise on security risk tied to product decisions, architecture, and partnerships.
• Lead breach preparedness and incident response, including DR and Business Continuity.

📋 Requirements

• Significant experience owning security programs in cloud-native environments.
• Deep technical ability in the security domain with working knowledge to discuss with application engineers.
• Strong legal and regulatory instincts; healthcare or HIPAA experience is a strong plus.
• Exceptional communication skills to explain security risk to diverse audiences.

✨ Nice to Have

• Experience with SOC 2, HIPAA, HITRUST certifications.
• Experience in a fast-growing SaaS company.
• Familiarity with AWS native security tools.

🎁 Benefits & Perks

• 🏖️ Flexible PTO
• 🏥 Health, dental, and vision insurance
• 📈 Equity in a high-growth startup
• 💻 Remote-first culture with home office stipend
• 📚 Professional development budget

📨 Hiring Process

Estimated timeline: 2-4 weeks · AI estimate

1. 1Recruiter Screen· 30 min
2. 2Hiring Manager Interview· 60 min
3. 3Technical Interview· 60 min
4. 4CEO Interview· 45 min