Member of Technical Staff, Security

About the Company

Mandolin is laying the clinical and financial infrastructure to get groundbreaking treatments to patients faster, powered by AI agents. We partner closely with the largest healthcare institutions in the US, covering more than $10B drug spend across the country.

Responsibilities

• Integrate security into the Software Development Lifecycle (SDLC) and CI/CD pipelines
• Conduct application security reviews, threat modeling, and vulnerability assessments
• Identify and remediate vulnerabilities related to OWASP Top 10, APIs, and secrets management
• Design and implement security controls across cloud environments including AWS, Azure, or GCP
• Secure cloud-native platforms, containers, Kubernetes, and Infrastructure-as-Code (IaC)
• Monitor and improve logging, alerting, and incident response capabilities
• Support security compliance initiatives including SOC 2, ISO 27001, HIPAA, and GDPR
• Assist with risk assessments, audit readiness, and vendor security reviews

Requirements

• 4+ years of experience in Security Engineering, Application Security, Cloud Security, or DevSecOps
• Strong understanding of application security, infrastructure security, and compliance concepts
• Hands-on experience with cloud platforms (AWS, Azure, or GCP)
• Familiarity with CI/CD pipelines, container security, and Kubernetes
• Experience with security tools such as SAST, DAST, SIEM, CSPM, and EDR/XDR
• Scripting or automation experience using Python, Bash, or PowerShell
• Strong communication skills for cross-team collaboration

Preferred Qualifications

• Experience in SaaS, fintech, or healthcare regulated environments
• Familiarity with Zero Trust architectures
• Experience supporting compliance audits and governance initiatives
• Relevant certifications such as CISSP, Security+, CCSP, or AWS Security Specialty