Product Security Engineer

Candid Health is building an autonomous Revenue Cycle Management (RCM) platform for healthcare. We are looking for a Product Security Engineer to champion security within product engineering. Responsibilities include leading threat modeling, driving secure development lifecycle (SDLC), vulnerability management, building security automation, developing secure coding standards, supporting incident response, and ensuring supply chain security. The role involves working with development squads to in

5+ years of experience in software engineering or security engineering focusing on product/application security. Proficiency in one or more programming languages (Python, Go, Java, JavaScript). Deep understanding of web/cloud architecture (APIs, Microservices, Kubernetes, AWS/GCP/Azure). Familiarity with OWASP Top 10. Proven ability to influence and collaborate with engineering teams. Strong analytical skills. Preferred: experience with IaC security (Terraform, CloudFormation), cryptographic im