Software Engineer (Python, API)

About The CompanyMaven Clinic is the world's largest virtual healthcare platform dedicated to women and families, with a mission to make healthcare accessible, equitable, and effective for all. Since its founding in 2014 by CEO Kate Ryder, Maven has revolutionized the healthcare industry by providing comprehensive, end-to-end women's and family health programs through its innovative digital platform. The company partners with over 2,300 employers and health plans via Maven Enterprise to deliver services spanning fertility, family building, maternity, newborn care, parenting, pediatrics, menopause, and midlife health. Maven's consumer platform offers direct access to virtual care across more than 30 specialties, including hormone therapy and GLP-1 care programs tailored specifically for women. Recognized for its leadership and innovation, Maven has secured more than $425 million in funding from prominent investors such as General Catalyst, Sequoia, Dragoneer Investment Group, Oak HC/FT, and others. The company has been honored with numerous awards, including TIME100 Most Influential Companies, CNBC Disruptor 50, and Fast Company's Most Innovative Companies, reflecting its industry impact and commitment to improving healthcare outcomes. Maven's culture emphasizes innovation, diversity, and a shared purpose to build a better healthcare experience for women and families worldwide.About The RoleWe are seeking a highly skilled Security Platform Engineer to join Maven's security team. In this pivotal role, you will be responsible for designing, implementing, and maintaining scalable and compliant security infrastructure that supports our cloud-native applications and services. Your expertise will help ensure that Maven's systems adhere to strict regulatory standards such as HIPAA, SOC 2, and ISO 27001, safeguarding sensitive health data and maintaining trust with our users. You will develop and manage identity, authentication, and access management systems utilizing tools like Okta, GCP IAM, Auth0, and OPA, while establishing Zero Trust principles and enforcing the least-privilege access across the organization. Your work will include creating observability dashboards, automating evidence collection for compliance audits, and developing self-service security tools that integrate seamlessly with developer workflows. Additionally, you will lead threat modeling, security architecture reviews, and collaborate closely with cross-functional teams to embed security best practices into product development. As a senior member of the security team, you will act as a technical authority, mentor peers, and promote a culture of transparency, accountability, and continuous improvement. This role offers an exciting opportunity to shape Maven’s security posture and contribute to building a safer, smarter healthcare platform for women and families globally.Qualifications8+ years of software engineering experience, with at least 3+ years in security infrastructure or application securityProven experience designing and implementing large-scale, distributed, cloud-native systemsStrong proficiency in programming languages such as Python, TypeScript, Go, and/or RustDeep understanding of cloud security principles, preferably with GCP; experience with AWS or Azure is also valuableHands-on experience with Kubernetes, containers, and infrastructure-as-code tools like TerraformFamiliarity with security testing frameworks and secure Software Development Lifecycle (SDLC) practicesExcellent communication, documentation, and collaboration skillsRelevant certifications such as CISSP, GCP Professional Cloud Security Engineer, or OSCP are a plusExperience with security compliance automation (SOC 2, ISO 27001, PCI-DSS, NIST) is preferredKnowledge of AI/ML security and supply-chain security practices is advantageousResponsibilitiesDesign and implement scalable security infrastructure supporting compliance standards such as HIPAA, SOC 2, and ISO 27001Develop and maintain identity, authentication, and access management systems using tools like Okta, GCP IAM, Auth0, and OPAImplement observability and anomaly detection across microservices, data stores, and SaaS platformsEstablish Zero Trust security principles and enforce least-privilege access across the organizationCreate compliance dashboards and automate evidence collection for auditsBuild self-service security tools that integrate with developer workflows (e.g., GitLab CI/CD, Terraform)Automate security processes such as onboarding, offboarding, access reviews, and policy enforcementIntegrate security into the software supply chain, including dependency scanning and SBOM managementLead threat modeling and security architecture reviews for new products and servicesPartner with product, data, and engineering teams to embed secure-by-default design principlesContribute to incident response activities, including post-mortem analysis and security improvementsMentor peers and promote secure coding and architecture practices across teamsCollaborate with cross-functional stakeholders (Engineering, Compliance, Clinical, Legal) to align security strategiesBenefitsCompetitive salary range of $221,000 - $260,000 per year, based on experience and qualificationsEquity options and comprehensive benefits packageHealth, dental, and vision insurance coverageEmployer-covered wellness programs and mental health supportHybrid work model with flexible remote options and in-person collaboration in New York, San Francisco, and other major cities16 weeks of fully paid parental leave and a new parent stipend for eligible employeesAnnual professional development stipend and access to personal career coachingEqual OpportunityWe are proud to be an Equal Employment Opportunity employer. We are committed to equal employment opportunity regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity, veteran status, or any other basis protected by federal, state, or local law.