← All roles

Member of Technical Staff, Security

Mandolin· Engineering
Apply on company site
San Francisco$160k - $270kFull-timePosted 5mo ago

About the role

Security Engineer role focused on integrating security across SDLC, cloud infrastructure, and compliance programs; hands-on generalist across Application Security, Platform/Cloud Security, and Governance, Risk & Compliance (GRC) to partner with Engineering, DevOps, IT, and Compliance.

Responsibilities

  • Integrate security into the Software Development Lifecycle (SDLC) and CI/CD pipelines
  • Conduct application security reviews, threat modeling, vulnerability assessments, and support secure code review practices
  • Identify and remediate vulnerabilities related to the OWASP Top 10, APIs, authentication/authorization, secrets management, and software dependencies
  • Design and implement security controls across cloud and infrastructure environments including AWS, Azure, or GCP
  • Secure cloud-native platforms, containers, Kubernetes environments, CI/CD systems, and Infrastructure-as-Code (IaC) deployments
  • Monitor and improve logging, alerting, vulnerability management, endpoint protection, and incident response capabilities
  • Collaborate with Platform Engineering and DevOps teams to improve infrastructure hardening and operational security practices
  • Support security compliance initiatives including SOC 2, ISO 27001, HIPAA, PCI-DSS, GDPR, and NIST-based programs
  • Assist with risk assessments, audit readiness, evidence collection, policy development, vendor security reviews, and remediation tracking
  • Help drive security awareness, promote secure engineering best practices, and contribute to long-term security strategy and maturity initiatives
  • Research emerging threats, vulnerabilities, and security technologies to continuously improve organizational security posture

Qualifications

  • 4+ years of experience in Security Engineering, Application Security, Cloud Security, DevSecOps, or related cybersecurity roles
  • Strong understanding of application security, infrastructure/cloud security, and security compliance concepts
  • Experience securing modern web applications, APIs, cloud environments, and distributed systems
  • Hands-on experience with cloud platforms such as AWS, Azure, or GCP
  • Familiarity with CI/CD pipelines, container security, Kubernetes, and Infrastructure-as-Code security practices
  • Experience with security tools such as SAST, DAST, SIEM, vulnerability scanners, CSPM, EDR/XDR, and IAM solutions
  • Scripting or automation experience using Python, Bash, PowerShell, or similar languages
  • Strong communication skills with the ability to collaborate across technical and non-technical teams

Skills

Required:Security EngineeringApplication SecurityCloud SecurityCI/CDScripting
Nice to have:GRC

Benefits

  • Unlimited PTO
  • Free lunch & dinner
  • Health insurance
  • Dental insurance
  • Vision insurance
  • Life insurance
  • $300/month company-sponsored commuter benefits
  • State of the art gym in the office
Last updated Oct 15, 2026. Interested? Apply on the company site.

About Mandolin

Precision automation for specialty drugs

Mandolin replaces fragmented workflows with AI agents that execute the end-to-end lifecycle, including intake, benefits, prior authorizations, and revenue cycle management. Increase throughput without increasing headcount.

automationhealthcarespecialty drugsAI
Company profileWebsite

More open roles at Mandolin