{"id":1392185,"url":"https://alion.io/job/doxy-staff-product-security-engineer","title":"Staff Product Security Engineer","company":{"id":1825756,"name":"Doxy","domain":"doxy.me","url":"https://alion.io/company/doxy","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"BambooHR","truth_index":null},"role":"Security","role_family":"Security","seniority":"staff","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"inferred","locations":[],"countries":[],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"CI/CD","optional":false},{"name":"GCP","optional":false},{"name":"Helm","optional":false},{"name":"HIPAA","optional":false},{"name":"Kubernetes","optional":false},{"name":"OWASP Top 10","optional":false},{"name":"SOC 2","optional":false},{"name":"Terraform","optional":false},{"name":"Threat Modeling","optional":false},{"name":"JavaScript","optional":true},{"name":"Jest","optional":true},{"name":"Nest.JS","optional":true},{"name":"Next.js","optional":true},{"name":"Node JS","optional":true},{"name":"Playwright","optional":true},{"name":"React.js","optional":true},{"name":"Stripe","optional":true},{"name":"Twilio","optional":true},{"name":"TypeScript","optional":true},{"name":"WebRTC","optional":true}],"status":"live","first_seen_at":"2026-09-09T00:00:00Z","employer_posted_date":"2026-09-09","last_verified_at":"2026-10-18T18:21:52Z","board_verified":true,"closed_at":null,"days_open":39,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":39},"description":"Staff Product Security Engineer\nWho we are\nWe’re doxy.me (doc-see-me), the world's most loved telemedicine solution, and we're on a mission to connect the world to the future of healthcare.\nWe believe that cost and complexity should never be a barrier to telemedicine. That’s why we created a simple, free, and secure telemedicine platform. Since 2013, we’ve grown to more than 1 million healthcare providers from 180+ countries who have clocked over 8 billion minutes of telemedicine sessions to date.\nOur goal is to deliver the future of healthcare to every patient and healthcare professional on earth. Help us get there by joining our team of innovators, dreamers, and doers.\nWe’re a remote-first company with regional hubs for in-person collaboration (Austin, TX, Boston, MA, Charleston, SC, Salt Lake City, UT & London, UK).\nWho you are\nWe’re seeking aStaff Product Security Engineer who thrives on making an impact by being part of a team that ensures that Doxy.me is safe, secure, and compliant over time with industry standards for security, secure SDLC, and secure operating principles. As an early member of Doxy.me’s Application Security team you will build the technical foundation of the security and privacy of our products long into the future.\nWhat you’ll do\nProvide security leadership and guidance within our product engineering teams through developer-led threat modeling and education on security and privacy best practices that prevent the authoring of vulnerabilities.\nCoordinate security requirements and standards throughout the product life cycle by working closely with product engineering to manage the vulnerabilities, cryptography, security monitoring, and risk management controls within our application-based products.\nParticipate in the development of Doxy.me’s DevSecOps security strategy and posture by designing, advocating and helping build secure-by-default CI/CD pipelines and processes\nDevelop engineering reference implementations on topics of security patterns and security guardrails and how to implement these into software frameworks and the technology stack. Support and implement security technology and security control design proof of concepts and implementations\nBe a pioneering member of the Doxy.me Information Security Team; liaise with Product and Engineering teams to ensure all product business cases include functional security specs to ensure compliance with information security standards \nTrack trends against various metrics that capture the risks, threats, and vulnerabilities within the product environment then prioritise and implement remediation activities for application flaws.\nYour skills and experience\nA Bachelor's degree in computer science, programming, or related field and or equivalent job experience in lieu of a degree.\nExperience working with remote, globally distributed teams \nExperience working in organisations that develop software and/or operate managed infrastructure and technology services for their own customers \nAWS platforms or services (also consider equivalent experience in Azure or GCP)\nKubernetes and container infrastructure\nSecure development and application of IAC solutions (Terraform, Helm) \nExperience with DevOps tools and processes, such as continuous integration and continuous deployment (CI/CD)\nExperience with security testing tools, such as static Code analysis and dynamic Application security testing (DAST)\nStrong understanding of OWASP Top 10, application security vulnerabilities and web security testing methodologies\nUnderstanding of secure coding practices for compliance requirements within SOC2, ISO, HIPAA, HITRUST, etc.\nAble to effectively give, receive, and respond to feedback\nAbility to educate company employees about security measures.\nWhat we can offer you\nWe have been evolving our benefits since launching in the UK in 2023; we’re continually seeking employee feedback to ensure they deliver real value to everyone and, as such, the below is not a finite, exhaustive list. Alongside a competitive salary, we also offer;\nUnlimited PTO\nPrivate medical, optical and dental healthcare through AXA\n5% matched company pension\nRemote working - we have recently secured a small flexible office workspace in London Liverpool Street (here). Our current expectations are for teams to meet once per month in office; we would still anticipate a remote dominant environment going forward\nCompany equipment (inc. latest laptop) + £500 spending allowance on equipment you can keep\nInterview process\n1st stage - Chat with our internal recruiter\n2nd stage - Hiring Manager interview\n3rd stage - Team Based interview\n4th stage - Technical interview/test\n5th stage - Meet with our VP of Engineering\nAdditional information\nDoxy.me tech stack Frontend: React, TypeScript, Playwright, WebRTC, Next.js,Nx.dev\nBackend: Nodejs, TypeScript, Jest, NestJS, Nx.dev\nCloud: AWS\n3rd party: Vonage, Segment, Twilio, Stripe\n\nOur team: technologists, academics, researchers, and innovators from all over the world. English is the language used in all internal communication.\nTo ensure HIPAA compliance we perform background checks after extending a job offer","description_format":"text","description_chars":5152,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[{"language":"English","level":"All levels","optional":false}]},"benefits":["Unlimited PTO"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Health Care","Telemedicine & Virtual Care","Medical AI"],"lifecycle":[{"event":"open","at":"2026-09-28T12:08:13Z"}],"visa":[],"liveness":{"score":35,"band":"fade","label":"Fading","p_open":1,"p_active":0.632,"p_room":0.55,"age_days":38,"expected_fill_days":30,"reasons":["conf:5","win:tail"],"computed_at":"2026-10-17T05:46:00Z"},"pay":null,"html_url":"https://alion.io/job/doxy-staff-product-security-engineer","json_url":"https://alion.io/job/doxy-staff-product-security-engineer.json","meta":{"generated_at":"2026-10-18T20:38:19Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":24441,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-19T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1825756},"rest":"https://alion.io/mcp/rest/get_company?id=1825756"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fdoxy-staff-product-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fdoxy-staff-product-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fdoxy-staff-product-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/doxy-staff-product-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fdoxy-staff-product-security-engineer"}]}