Cloud Security Engineer

Ro is a direct-to-patient healthcare company with a mission of helping patients achieve their health goals by delivering the easiest, most effective care possible. Ro is the only company to offer nationwide telehealth, labs, and pharmacy services. This is enabled by Ro's vertically integrated platform that helps patients achieve their goals through a convenient, end-to-end healthcare experience spanning from diagnosis, to delivery of medication, to ongoing care.

Since 2017, Ro has helped millions of patients, including one in every county in the United States, and in 98% of primary care deserts.

Ro has been recognized as a Fortune Best Workplace in New York and Health Care for four consecutive years ). In 2023, Ro was also named Best Workplace for Parents for the third year in a row. In 2022, Ro was listed as a CNBC Disruptor 50.

The Cloud Security function at Ro is dedicated to protecting the security and privacy of our patients by continually raising the security bar across our cloud environments. We achieve this by collaborating closely with engineers and leaders across Ro’s platform, data, and product teams, devising, implementing, and communicating a well‑rounded approach to security. In this role, you’ll have direct influence on strategic initiatives, providing the engineering expertise necessary to make confident, scalable, secure, and privacy‑respecting decisions—all while employing a hands‑on builder mindset to “build it in.”

This role is a senior‑level individual contributor position, where you’ll serve as a hands‑on technical expert, building internal products and infrastructure to protect Ro’s cloud security posture and meet compliance objectives. As a key member of the Product Security team, which comprises expertise in product security, cloud security, architecture, and privacy engineering, you will design and automate scalable architectures and tools.

You will be the technical advocate for cloud security decisions, driving discussions and designs, and working closely with Ro’s infrastructure and engineering teams to make secure infrastructure solutions.

You are an expert communicator and a kind, team player.

• Maintain and Operate Secure Cloud Infrastructure
  :
  Lead the ongoing maintenance and operation of secure cloud infrastructures, focusing on AWS and cloud‑native technologies. Ensure environments are resilient, compliant, and secure through multi‑layered protection strategies
• Cloud Native Application Protection
  :
  Secure applications built for cloud environments by automating security assessments, monitoring runtime environments, and integrating security practices into the development lifecycle. Focus on containers, serverless architectures, and virtual machines, adapting to emerging threats
• Cloud Workload and Data Protection
  :
  Implement robust security controls for cloud workloads and data, including containers, virtual machines, and serverless architectures. Protect against threats while maintaining performance and scalability, using encryption, data loss prevention, and access controls
• Kubernetes and Cloud Security Hardening
  :
  Lead security hardening across all cloud security layers, with a focus on Kubernetes clusters and cloud‑native environments. Secure container runtimes, implement stringent network policies, manage secrets securely, and ensure resilience against attacks at scale
• Collaborate on Secure Platform Solutions
  :
  Partner with infrastructure, product security, security engineering, and engineering teams to design and implement secure platform solutions. Provide expertise in developing Infrastructure as Code (IaC), CI/CD pipelines, and deployment processes, ensuring security is integrated throughout the development lifecycle
• Automation of Security Operations
  :
  Develop and deploy automation solutions to enhance security operations, reduce manual efforts, and ensure consistent security practices. Create reusable templates and modules for secure infrastructure to enable rapid, secure deployments
• Security Incident Response
  :
  Contribute to incident response efforts, including detection, analysis, containment, and recovery. Work with internal and external…