In the healthcare sector, the Health Insurance Portability and Accountability Act of 1996 (HIPAA) requires that all insurance payers exchange transactions such as claims, eligibility checks, prior authorizations, and remittances using a standardized EDI format called X12 HIPAA. A small group of legacy clearinghouses process the majority of these transactions, offering consolidated connectivity to carriers and providers.
Stedi is building the world’s only API-first clearinghouse. By offering modern API interfaces alongside traditional real-time and batch EDI processes, we enable both healthcare technology businesses and established players to exchange mission-critical transactions.
Stedi has lightning in a bottle: engineers and designers shipping products week in and week out; a lean business team supporting the company’s infrastructure; passion for automation and eliminating toil; $92 million in funding from top investors like Stripe, Addition, USV, Bloomberg Beta, First Round Capital, and more.
We are seeking an experienced Security Engineer to join our Platform Team. This team is at the core of our infrastructure, responsible for managing multiple AWS Organizations and providing the foundational tools and services that enable our engineering teams to build reliable, secure, and compliant applications.
The Platform Team’s responsibilities span a wide range of areas, including:
The infrastructure AWS our engineering teams rely on.
Authentication services for our customers.
Management of our GitHub organization and IT operations.
Supporting compliance efforts to ensure alignment with industry standards (SOC, HIPAA, HITRUST).
As a Security Engineer, you will play an active role in how we set up our AWS infrastructure, software development lifecycle, and endpoint security. Your contributions will help ensure our engineering teams build applications in a way where it is easy to demonstrate alignment with regulatory and compliance requirements.
We use AWS exclusively for our backend infrastructure that processes customer data. We use tools like GitHub, Stripe, Vanta, and PagerDuty, but all of our application work happens on AWS.
We use serverless technologies almost exclusively: Lambda, API Gateway, SQS, SNS, DynamoDB, Aurora Serverless, and more. We don’t run a single server on prem or in the cloud.
We use CDK (TypeScript) to define infrastructure as code.
We have a strong preference for using AWS products over 3rd party solutions. This simplifies vendor management and compliance, and ensures we can benefit from the integration capabilities and innovations that AWS provides us with now and in the future.
Develop playbooks and address security-related tasks in our AWS serverless environments.
Drive improvements in our broader ‘IT’ footprint, including endpoint security, access management / just-in-time access, email and web gateways, browser security, and data loss prevention.
Collaborate with product engineering teams to raise the bar for security, supporting CI/CD pipelines, dependency management, and secure application design reviews.
Help secure and improve our AWS organization using infrastructure as code (CDK) , enforcing security controls, and ensuring strong tenant isolation.
Continuously assess vulnerabilities and perform regular risk assessments.
Manage Vanta workflows and automate tasks to maintain SOC and HIPAA compliance.
6+ years of experience in engineering working as a security engineer or in security-adjacent roles
Familiarly with compliance frameworks such as SOC, HIPAA, and/or HITRUST
4+ years working with AWS services, including compliance and governance services like AWS Organizations, AWS CloudTrail, AWS Config, Security Hub, and GuardDuty.
Proficiency in TypeScript.
Ability to prioritize your work based on the needs of the business and the customers
High bandwidth; thoughtful attention to many areas simultaneously
Ability to context switch throughout the course of the day or week as priorities shift
Philosophical alignment with the Stedi Standards and the Unwritten laws of engineering .
At Stedi, we're looking for people who are deeply curious and aligned to our ways of working. You're encouraged to apply even if your experience doesn't perfectly match the job description.
...Occupational Therapist (OT) Skilled Nursing Facilities | Multiple Locations Available (CA) Key Details: ~13-Week Contracts ~3638 Hours per Week ~$57$70/hr, depending on experience ~ Start ASAP Were actively hiring NOW for Occupational Therapists...
...Bring precision to every rebuild We are seeking a shop-based mechanic who thrives on diagnosing complex systems and turning worn... ...workflow. Troubleshoot and repair mechanical, electrical, and hydraulic issues; service battery, air- and watercooled combustion...
...Job Description The Student Worker - Barista crafts a memorable experience for our customers by providing timely service, quality beverages and products, and maintaining a clean and comfortable location environment. The Student Worker - Barista is responsible for processing...
...Fuels and how it is leading the effort tocapture North Americas naturally occurring methane and decarbonize the economy, please visit... ...performs all functions for safely operating a Renewable Natural Gas Facility. This position shares accountability of the day-to-day...
***Sign-on Bonus $5,000*** Internal Employees Not Eligible for Sign-on Bonus Labcorp Drug Development, the worlds most comprehensive drug development company, dedicated to improving healthcare and improving lives. Our unique perspectives, built from decades of scientific...