Staff Security Engineer

ABOUT PIVOTAL HEALTH Pivotal Health is the leading technology platform that helps healthcare providers get paid fairly in an increasingly complex reimbursement landscape. Today, many providers face persistent underpayment from health insurance companies, despite delivering high-quality care. While processes like IDR (Independent Dispute Resolution) were designed to promote fairness, they’re often administrative-heavy, time-consuming, and difficult to navigate without the right tools. Pivotal Health combines software, data, and service into a seamlessly integrated, AI-driven platform that simplifies these complex reimbursement workflows. We help providers efficiently dispute underpaid claims, reduce administrative burden, and recover the reimbursement they’re entitled to; without adding more work to already stretched teams. Our full-service IDR solution is just the starting point. We’re building solutions that enable providers to operate with clarity, control, and confidence across the reimbursement journey. ABOUT THE ROLE As Pivotal’s first dedicated security hire, you will play a critical role in architecting and building our security program from the ground up. In addition to strengthening platform and infrastructure security, you will help establish the security roadmap, identify and prioritize protection of the company’s “crown jewels,” and embed a secure-by-design culture across engineering. This role sits at the intersection of platform engineering, infrastructure, and security architecture. You’ll partner closely with engineering teams to design secure cloud systems, implement automated guardrails, and establish patterns that allow teams to move quickly without compromising security. You’ll help define how security is embedded directly into the platform itself - shaping infrastructure design, networking boundaries, CI/CD workflows, and developer tooling so security scales naturally as the system grows. You’ll also play a key role in maturing Pivotal’s security posture as we prepare for and maintain compliance while ensuring security practices evolve alongside the platform and the business. This is a high-impact role with meaningful ownership. You’ll help shape the systems, practices, and architecture that protect the platform as Pivotal continues to scale. You will also help translate regulatory requirements and evolving security risks into pragmatic engineering solutions that balance strong protection with developer velocity. WHAT YOU’LL DO - Define and evolve Pivotal’s security architecture: Help shape the long-term security architecture of the platform, establishing patterns and guardrails that ensure infrastructure, networking, and services remain secure as the system scales. - Build security directly into the platform: Design and implement automated controls, policies, and tooling that embed security into our infrastructure and engineering workflows rather than relying on manual review processes. - Own infrastructure security and automation: Expand and strengthen Infrastructure as Code practices using Terraform to ensure infrastructure is provisioned securely, consistently, and auditable across environments. Where necessary, deploy and integrate security tooling that strengthens our detection, prevention, and response capabilities across the platform. - Lead cloud and network security design: Design secure networking architectures including VPC configuration, private networking, firewall policies, and edge protections that safeguard internal systems and customer data. Over time, help extend security practices to any hybrid or on-premise infrastructure environments as the platform evolves. - Secure development workflows and CI/CD systems: Establish best practices for secure build pipelines, dependency management, artifact integrity, and secure software delivery. - Drive compliance readiness and regulatory maturity: Lead security initiatives required for frameworks such as SOC 2 and HIPAA, including control design, r