Staff Cloud Security Engineer

Join Tech @ Ro to build the future of healthcare, from the ground up!
At Ro, we believe that when people achieve their health goals, they can achieve their life goals. The highest-leverage way to move society forward is to give people their health, and the current healthcare system isn’t built to do that. It was built to bill, not to serve patients.
We’re building a new system. One where the patient is in control. One designed from scratch for the digital age.
At Ro, technology isn’t just a function… It's core to how we deliver care. We’ve built a vertically integrated healthcare platform that connects telehealth, diagnostics, pharmacy, and logistics into a seamless, end-to-end experience for millions of patients.
…and we’re just getting started. 
As part of Tech @ Ro, you’ll work on systems that operate at scale, with an opportunity to:

Solve complex, high-concurrency problems across a full-stack platform
Build and ship quickly with tight feedback loops and real-world impact
Own systems end-to-end, from architecture to production performance
Work alongside experienced operators, technical leaders, and clinicians
Help define how modern healthcare should be delivered

We’re a performance-driven team with a strong sense of ownership and urgency. We move fast, learn quickly, and hold a high bar for what we build, and do so with a big heart — because patients depend on it.
If you’re motivated by impact, scale, and the chance to help lead the patient revolution, come build with us.
The Role
 
The Cloud Security function at Ro is dedicated to protecting the security and privacy of our patients by continually raising the security bar across our cloud environments. We achieve this by collaborating closely with engineers and leaders across Ro’s platform, data, and product teams, devising, implementing, and communicating a well-rounded approach to security.
 
In this role, you’ll have direct influence on strategic initiatives, providing the engineering expertise necessary to make confident, scalable, secure, and privacy-respecting decisions—all while employing a hands-on builder mindset to “build it in.” You'll serve as a hands-on technical expert, building internal products and infrastructure to protect Ro’s cloud security posture and meet compliance objectives. As a key member of the Product Security team, which comprises expertise in product security, cloud security, architecture, and privacy engineering, you will design and automate scalable architectures and tools. You will be the technical advocate for cloud security decisions, driving discussions and designs, and working closely with Ro’s infrastructure and engineering teams to make secure infrastructure solutions. 
 
You are an expert communicator and a kind, team player.
7+ years of experience in cloud security engineering and architecture, with advanced expertise in AWS, Azure, or Google Cloud Platform
Deep understanding of cloud security principles and best practices, with proven experience in implementing and managing cloud-native security tools at scale
Extensive knowledge of fundamental security technologies, including firewalls, IDS/IPS, endpoint protection, IAM, encryption, and DLP
Expertise with key tooling: Cloud Security Posture Management (CSPM), Cloud Native Application Protection Platforms (CNAPPs), Cloud Workload Protection Platforms (CWPPs) and Data Security Posture Management (DSPM)
Expertise in securing and hardening cloud workloads, including containers, serverless architectures, and virtual machines, with a track record of enhancing security posture
Advanced experience with Infrastructure as Code (IaC) tools like Terraform, CloudFormation, and Pulumi, and expertise in integrating security into CI/CD pipelines
High proficiency in programming or scripting languages for developing complex security automation solutions
Comprehensive understanding of cloud and network security, with experience in securing cloud architecture across multiple environments
Demonstrated ability to perform in-depth security reviews of SaaS product architecture and its supporting infrastructure, with a focus on driving improvements
Familiarity with and ability to implement compliance standards HIPAA, HITRUST, CIS, NIST 800-53 and others with a low-touch approach
Strong leadership and communication skills, with a proven track record of collaborating with cross-functional teams, including product teams and developers, to drive a security-first culture, effect change across the organization and further the cloud security roadmap
Full medical, dental, and vision insurance + OneMedical membership
Healthcare and Dependent Care FSA
401(k) with company match
Flexible PTO
Wellbeing + Learning & Growth reimbursements
Paid parental leave + Fertility benefits
Pet insuranceStudent loan refinancing
Virtual resources for mindfulness, counseling, and fitness

Maintain and Operate Secure Cloud Infrastructure: Lead the ongoing maintenance and operation of secure cloud infrastructures, focusing on AWS and cloud-native technologies. Ensure environments are resilient, compliant, and secure through multi-layered protection strategies
Cloud Native Application Protection: Secure applications built for cloud environments by automating security assessments, monitoring runtime environments, and integrating security practices into the development lifecycle. Focus on containers, serverless architectures, and virtual machines, adapting to emerging threats
Cloud Workload and Data Protection: Implement robust security controls for cloud workloads and data, including containers, virtual machines, and serverless architectures. Protect against threats while maintaining performance and scalability, using encryption, data loss prevention, and access controls
Kubernetes and Cloud Security Hardening: Lead security hardening across all cloud security layers, with a focus on Kubernetes clusters and cloud-native environments. Secure container runtimes, implement stringent network policies, manage secrets securely, and ensure resilience against attacks at scale
Collaborate on Secure Platform Solutions: Partner with infrastructure, product security, security engineering, and engineering teams to design and implement secure platform solutions. Provide expertise in developing Infrastructure as Code (IaC), CI/CD pipelines, and deployment processes, ensuring security is integrated throughout the development lifecycle
Automation of Security Operations: Develop and deploy automation solutions to enhance security operations, reduce manual efforts, and ensure consistent security practices. Create reusable templates and modules for secure infrastructure to enable rapid, secure deployments
Security Incident Response: Contribute to incident response efforts, including detection, analysis, containment, and recovery. Work with internal and external stakeholders to minimize the impact of incidents and prevent future occurrences
Compliance, Risk Management, and Data Governance: Ensure cloud infrastructures comply with standards such as SOC 2, HIPAA, and HITRUST. Implement automated compliance checks, data governance practices, and reporting to maintain alignment with these frameworks and protect data integrity
Technical Leadership and Mentorship: Act as a technical leader and mentor, promoting a security-first mindset. Guide best practices in cloud security and data protection, and integrate secure practices into the organization’s culture and processes