About the Role
Pomelo Care is seeking an individual to own the execution of security controls, automation, and code to reduce risk. This role involves building secure-by-default libraries, guardrails, and tooling, defining and implementing least-privilege guardrails, and hardening developer machines. The position requires partnering with compliance to translate control objectives into practical implementations.
Responsibilities
- Own security problems end to end, navigating ambiguity to decide what matters, build it, and ship it independently.
- Find real risks and build the most direct controls to mitigate them.
- Build secure-by-default libraries, guardrails, and tooling for other engineers.
- Define and implement strict least-privilege guardrails across all services.
- Harden developer machines to minimize supply chain attack risks.
- Partner with compliance to translate control objectives into real controls and focus effort on risk reduction.
Requirements
- Strong track record of making organizations measurably safer, focusing on risks closed rather than tickets opened.
- Ability to distinguish signal from noise and prioritize high-impact risks.
- 7+ years of software engineering experience with production-grade code.
- Deep security knowledge including threat modeling, identity and auth flows, OWASP Top 10, cloud, and supply-chain security.
- Instinct to understand the actual threat and build the most direct fix when issues arise.
- Desire to own more responsibility over time and proactively take on challenges.
Skills
- Kotlin
- Java
- Python
- Go
- C#
- Threat modeling
- Identity and auth flows
- OWASP Top 10
- Cloud security
- Supply-chain security
- Google Cloud Platform
- Internal developer platforms
- Secure-by-default tooling
Location
- Fully remote (within the US)
Work Type
- Fully remote
- Full-time
Experience Level
- 7+ years of software engineering experience
Education Level
- Bachelor's degree or equivalent experience
Salary/Compensations
- $220,000-$260,000
Benefits
- Comprehensive Health, Dental, and Vision coverage
- High deductible Health Plans with Health Savings Account (HSA) options
- Flexible Spending Account (FSA)
- Equity grant participation
- 401(k) program
- Competitive vacation policy
- 16 weeks paid parental leave
About the Company
- Pomelo Care is the leading virtual medical practice for women and children, providing care across pregnancy, postpartum, pediatrics, menopause, and perimenopause.
- Combines proactive, 24/7 clinical care with technology for earlier risk identification and personalized patient journeys.
- Team includes clinicians, technologists, operators, and problem-solvers focused on making high-quality care accessible.
- Engineering team builds AI-powered solutions to transform care delivery and create exceptional patient and clinician experiences.
- Fast-moving, well-funded, mission-driven startup that prioritizes patients.
- Values working across disciplines, moving fast, data-driven decision making, learning, and patient-first approach.
Equal Opportunity
- Committed to hiring the best team to improve outcomes for all mothers and babies, regardless of their background.
- Values diverse perspectives to reflect the diversity of problems and the population served.
- Looks to hire people from a variety of backgrounds, including race, age, sexual orientation, gender identity and expression, national origin, religion, disability, and veteran status.
