Job intelligence
Staff Software Engineer - Product Security
Maven Clinic
Before relying on the listing: Confirm Application closing time with the employer or source. See verification questions
Executive opportunity brief
The decision in one screen
A compact evidence-first read of compensation, flexibility, mobility and what still needs verification. No universal quality score is used.
Fast read
Opportunity DNA
There is a useful advantage here: pay compares strongly with similar current roles. Still, location rules could change the fit could change the fit.
Around the 87th percentile within 137 comparable USD salary observations.
Geographic eligibility is restricted to a country or region.
The listing does not make the minimum education or experience threshold clear enough yet.
Sponsorship and relocation support are not clear from the current listing.
Part of the application route can be assessed, but the full external process may contain additional steps.
At least one recent enabled source can still renew this vacancy.
This fingerprint summarizes what is clear, constrained or still unanswered in the current listing. It is a reading aid, not an overall job score.
Decision evidence check
4 of 5 core facts stated
This checks whether the listing states the facts that commonly change an employment decision. It measures disclosure completeness, not whether the opportunity is good or bad.
Facts already stated
- Compensation
- Work arrangement
- Advertised location
- Employment type
What to verify next
- Application closing time: Is there a firm application deadline, a rolling review window or no stated closing date?
Advertised location is not proof of work authorization, sponsorship, or legal eligibility. Unknown information is not a negative score; verify those questions separately.
Decision levers
What could make or break the fit?
Reasons to look closer
- Pay compares strongly with similar current roles: The annualized midpoint is around the 87th percentile among 137 comparable USD salary observations.
Trade-offs to weigh
- Location rules could change the fit: Geographic eligibility is restricted to a country or region.
Questions worth asking before you invest more time
- Confirm whether a degree is actually required, preferred, or replaceable with equivalent experience.
- Confirm the actual minimum experience requirement rather than assuming preferred background is mandatory.
- Ask whether visa sponsorship is available before investing significant time in the application.
These questions come from details the listing leaves open. An unanswered point is not treated as a disadvantage.
Opportunity neighborhood
Keep your options open
These live roles sit close enough to this opportunity to make useful comparison points. Look across several employers before deciding what pay, flexibility or access trade-offs you are willing to accept.
Frontend Engineer - User Interface
Nebius · USA
Why it is nearby: Same seniority band · Same country · Similar work arrangement
About 36% lower advertised midpoint
Senior Backend Engineer - Backend Platform (USA Only, 100% Remote)
Close · Anywhere in the World, 🇺🇸 United States of America
Why it is nearby: Same seniority band · Same country · Similar work arrangement
Senior Software Engineer, Search & AI
Muckrack · Remote (Bulgaria, Canada, Ireland, United States)
Why it is nearby: Same seniority band · Same country · Similar work arrangement
Senior Software Engineer
DRFIRST COM INC · USA Only
Why it is nearby: Same seniority band · Similar work arrangement · Same employment type
This neighborhood is drawn from current inventory in the same broad occupation. Similarity is based on explicit listing facts; missing details do not count against a job.
Role market context
How much current choice is visible around this kind of work?
This compares the vacancy with current High Paid Job inventory in the broad Software engineering roles family. It describes visible choice and disclosure, not future demand or career quality.
200 most recent current roles sampled for the disclosure measures below.
Distinct employers in the bounded current sample, not an estimate of all employers hiring in the market.
Current sampled roles stating at least four of the five Core Decision Facts.
Requires a numeric amount, explicit ISO currency and supported pay period.
Listings with explicit enough remote, hybrid or on-site evidence to classify.
Missing deadline evidence remains unknown and is not interpreted as an open-ended application window.
Currencies with explicit pay evidence in the sample: USD (18) · EUR (10) · GBP (8). Raw amounts across different currencies are not compared.
This describes current visible High Paid Job inventory in the same broad occupation family. Percentages use a bounded recent sample and are not a forecast, a complete labor-market census or an employer-quality measure.
Constraint opportunity lab
What changes the size of the current opportunity pool?
Each line applies one stricter evidence-based constraint to the same bounded current role-family sample. It helps you see the trade-off in visible choice without deciding which trade-off is right for you.
Counts only affirmative or possible sponsorship evidence, or relocation explicitly offered. Unknown is not treated as no.
A much stricter subset: only listings with explicit worldwide-remote evidence remain.
Only same-currency opportunities with usable annualized pay enter this comparison. Other currencies are not converted or treated as lower.
Requires amount, explicit ISO currency and a supported pay period. Missing pay evidence remains unknown.
Shows the subset with enough stated evidence for a more informed first comparison.
Uses only roles where a country is known. Roles without country evidence are excluded from this denominator.
Counts roles explicitly classified as worldwide remote, region-restricted remote or remote with restrictions still unclear.
Includes roles whose seniority is genuinely unspecified rather than assuming they belong to another level.
These are counterfactual filters over a bounded sample of current HPJ inventory in the same broad occupation family. They show how visible choice changes when one evidence-based constraint is applied; they do not tell you which constraint you should choose or predict hiring outcomes. The calculation uses the 200 most recent current roles from 3323 visible roles in this broad family.
Salary transparency context
Is pay disclosure typical for this kind of role?
This listing states usable structured compensation. About 18% of the bounded current role sample does the same.
Compensation counts only when amount, ISO currency and supported pay period are all known.
Pay disclosure is uncommon in the current role sample.
This employer’s current visible listings disclose pay materially more often than the current same-role sample.
This compares salary-disclosure behavior in current visible listings. It does not compare raw salary amounts across currencies, infer undisclosed pay as zero, or rate employer quality.
Private offer & negotiation lab
Turn an offer into evidence, not guesswork
Enter an annual base offer and, if you want, your own target. HPJ compares only within one explicit currency and never chooses a target for you.
Negotiation evidence available: advertised pay range, current same-currency market context, strong decision evidence.
Enter an annual base offer to compare it with explicit same-currency evidence. HPJ will not suggest a target for you.
Review the full package · 10 terms
Mark what is confirmed, what needs clarification and what you want to prioritize. These choices and notes stay in this browser.
Usable advertised compensation is available.
Variable compensation is mentioned; verify amount, formula, target and eligibility.
Equity or long-term incentive language is mentioned; verify grant type, vesting and valuation basis.
Retirement or pension benefits are mentioned; verify employer contribution and vesting.
Health-benefit language is mentioned; verify coverage, dependants and employee cost.
Paid-leave language is mentioned; verify the exact entitlement and carry-over rules.
A work-arrangement signal is available; verify schedule details before relying on it.
Relocation support not established
Sponsorship not established
A review cycle is mentioned; verify timing and whether compensation can change at that review.
Questions worth taking into the offer conversation
- Is there a bonus, commission or other variable-pay component, and how is it calculated?
- How much paid leave is provided and what are the carry-over or blackout rules?
- If relocation is relevant, what expenses, timing and repayment conditions are covered?
- What exact sponsorship or work-authorization conditions apply to this role?
- When is the first performance and compensation review after joining?
- Is there a firm application deadline, a rolling review window or no stated closing date?
Occupation intelligence
What broader career references connect to this role?
HPJ uses broad comparison families for current-market analysis. External taxonomy results are reference candidates for that broad family, not a declaration that this vacancy has been authoritatively classified into a specific occupation.
European occupation references
- software developer
- embedded systems software developer
- industrial mobile devices software developer
- ICT application developer
- IoT developer
This service uses the ESCO classification of the European Commission.
U.S. occupation references
- Software Developers 15-1252.00
- Computer Programmers 15-1251.00
- Software Quality Assurance Analysts and Testers 15-1253.00
- Computer Systems Analysts 15-1211.00
- Computer Systems Engineers/Architects 15-1299.08
This site incorporates information from O*NET Web Services by the U.S. Department of Labor, Employment and Training Administration (USDOL/ETA). O*NET® is a trademark of USDOL/ETA.
Career reference research
Skills worth investigating
Official occupational context, paired with exact phrases visible in this vacancy. It is not a skills test or an applicant-fit score.
ESCO · European occupation
software developer
Usually essential in this ESCO occupation
- perform scientific research
- ICT debugging tools
- engineering principles
- computer programming
- project management
- technical drawings
- define technical requirements
Context-dependent ESCO skills
- JavaScript
- KDevelop
- OpenEdge Advanced Business Language
- Apache Tomcat
- SQL
O*NET · U.S. occupation
Software Developers
O*NET occupation skills
- Programming
- Critical Thinking
- Judgment and Decision Making
- Active Learning
- Reading Comprehension
- Systems Analysis
- Active Listening
- Complex Problem Solving
Build my private skill preparation brief Your evidence · Practice · Interview questions
Plan how you might demonstrate or investigate occupational skills. These are broad-family reference examples, not confirmed vacancy requirements. Nothing you enter is sent to High Paid Job.
Private to this browser. Up to 20 reference skills; not a qualification assessment or hiring prediction.
Useful next question: Which of these occupational reference skills does the hiring manager actually expect for this specific role, and what evidence would demonstrate them?
These skills belong to one reference occupation selected for HPJ’s broad career family, not a verified classification of this vacancy. Text overlap only means a phrase appears in the available listing text; it does not establish an employer requirement, your proficiency, or a qualification gap. A missing mention is unknown, not a deficit.
Adjacent current roles to investigate
AI Engineer, Marketing
Instructure · USA
same stated country · same seniority band · same employment typeMachine Learning Manager, Feed Relevance (Retrieval)
Reddit · USA
same stated country · same seniority band · same employment typeMachine Learning Manager, Feed Ecosystems
Reddit · USA
same stated country · same seniority band · same employment typeAdjacent-family roles are exploration prompts from current HPJ inventory. They are not inferred qualification matches and they do not imply a promotion path.
Career move map
What sits one step away?
This listing is currently read as Senior / lead. Nearby roles one visible seniority step away can help you judge whether to widen the search, stretch upward or compare the responsibilities more carefully.
Broader-entry direction
DevOps Engineer
TISTA Science and Technology Corporation · Remote — Worldwide
Similar work arrangement · Same employment type · Recently posted Advertised midpoint is about 56% lowerRemote software developer
Naples Jet Center · Remote — Worldwide
Similar work arrangement · Same employment type · Recently postedStretch direction
Staff Software Engineer
CodePath · LATAM, Canada, Europe, USA
Same country · Similar work arrangement · Same employment type Advertised midpoint is about 25% lowerPrincipal Software Engineer, Product Engineering
Dropbox · USA
Same country · Similar work arrangement · Same employment type Advertised midpoint is about 27% higherThese are live roles one visible seniority step away in the same broad occupation family. They can reveal nearby options, but they are not a guaranteed promotion path and do not account for your personal experience.
Skill bridge
What does this role connect to?
AWS is one of the signals this listing shares with skills appearing often across current Software engineering roles opportunities.
Skills named in this listing
Shared with the current career sample
- AWS Seen in 39 sampled listings
- Azure Seen in 21 sampled listings
- Google Cloud Seen in 26 sampled listings
- Kubernetes Seen in 52 sampled listings
Combinations also appearing together
- AWS + Kubernetes appeared together in 28 sampled listings
- Kubernetes + Python appeared together in 27 sampled listings
- AWS + Google Cloud appeared together in 19 sampled listings
Additional signals in this listing: Rust
Application edge
- If these skills match your background, prepare one concrete example that shows how you used AWS, Azure, and Google Cloud rather than relying on a keyword-only claim.
If the named skills are genuinely transferable in your own experience, the occupation map also points to adjacent current families worth researching: Data & AI roles, Cybersecurity roles, and Product roles. This is exploration context, not a qualification match.
Skill signals come from explicit text mentions. A mention is not automatically a requirement, and absence from the current top-skill list does not make a skill rare or unimportant. The current career comparison draws on 120 sampled listings; 113 contain a recognized skill signal.
Application Decision Lab
Turn the listing into a preparation plan
Separate what the listing actually states from what you still need to prepare or verify. Your selections and short notes stay in this browser and are never submitted to High Paid Job.
AWS
This skill or technology is explicitly mentioned in the available listing text. A mention is not automatically a mandatory requirement; prepare a concrete example only if it is relevant to your experience.
Azure
This skill or technology is explicitly mentioned in the available listing text. A mention is not automatically a mandatory requirement; prepare a concrete example only if it is relevant to your experience.
Google Cloud
This skill or technology is explicitly mentioned in the available listing text. A mention is not automatically a mandatory requirement; prepare a concrete example only if it is relevant to your experience.
Kubernetes
This skill or technology is explicitly mentioned in the available listing text. A mention is not automatically a mandatory requirement; prepare a concrete example only if it is relevant to your experience.
Python
This skill or technology is explicitly mentioned in the available listing text. A mention is not automatically a mandatory requirement; prepare a concrete example only if it is relevant to your experience.
Rust
This skill or technology is explicitly mentioned in the available listing text. A mention is not automatically a mandatory requirement; prepare a concrete example only if it is relevant to your experience.
Questions worth resolving before you rely on the opportunity
- Application closing time: Is there a firm application deadline, a rolling review window or no stated closing date?
- Work authorization / sponsorship: If sponsorship or work authorization matters to you, what exact immigration or employer-sponsorship conditions apply to this role?
- Application process: What interview, assessment, portfolio, reference or screening stages are part of the hiring process?
Decision analysis
What the listing really tells you
The headline alone does not tell the whole story for Staff Software Engineer - Product Security at Maven Clinic. The clearest decision context comes from compensation has enough depth for comparison, work-location flexibility has usable detail, and the visible application effort can be estimated.
Compensation has enough depth for comparison
Among 137 current comparable salaries in USD, the normalized annual midpoint is around the 87th percentile. This compares advertised pay in the same currency and does not include every element of total compensation.
Work-location flexibility has usable detail
The work-location pattern is “Remote with some uncertainty or restrictions”, with Remote Freedom at 62/100. One practical limit to notice is geographic eligibility is restricted to a country or region..
The visible application effort can be estimated
Provider-mediated application path. The external application may contain additional steps that are not visible from the listing itself.
Source continuity adds useful context
The opportunity currently has 1 renewable source path across 1 source classes. Multiple independent paths can strengthen continuity, but they are not a substitute for checking the application destination.
How this analysis is assembled
Built from the pay, location, qualification, mobility, application and source details available for this vacancy. Anything the listing leaves unresolved stays unresolved.
Analysis evidence coverage
How much analysis can the current evidence support?
Uses the explainable High Pay Score within the job’s current occupation/seniority/currency comparison sample.
Measures observable location flexibility and explicit restrictions; it does not determine whether remote work is personally desirable.
The configured source supplied structured salary fields, a usable currency and a focused comparison value.
The listing was posted about 3 days ago.
At least one enabled source recently observed the vacancy. The source chain is traceable, but this is not independent employer verification.
There is no universal opportunity score because pay, flexibility and access matter differently to different people. Compare Jobs lets you weight the evidence around your own priorities.
Decision checklist
What is supported, uncertain or worth checking?
This checklist separates supported strengths, visible cautions and missing evidence. It is not an overall recommendation or guarantee that the job is suitable for you.
Supported strengths
- Advertised pay is above much of the current comparable disclosed-salary sample.
Visible cautions
- Geographic eligibility is restricted to a country or region.
- This is remote work with a geographic restriction, not a worldwide-remote vacancy.
Still unknown
- Visa sponsorship is not established by the available listing data.
Pay vs. barriers
Strong pay with stated barriers to weigh
Pay compares strongly, but qualification or location constraints are also visible. Higher pay does not erase those practical requirements.
Comparable disclosed-pay evidence places this job at about 87 / 100 within its current occupation/seniority sample.
1 explicit Remote Freedom restriction signal is present and is shown separately from qualification requirements.
- Education requirement is not established.
- Required prior-experience level is not established.
This section weighs pay context against clearly stated barriers without collapsing unlike requirements into one universal score. Degree, experience, licensing, clearance and location limits remain separate, and missing qualification details stay unknown.
Beyond the headline
Not enough evidence for a hidden-value finding
Potential hidden value appears only when several distinct non-pay advantages are actually supported. Missing requirements or benefits are never counted as positives.
The annualized salary midpoint is at or above about 87% of the current comparable disclosed-salary sample.
Still check: The current application path is provider-mediated rather than directly classified as an employer-authorized or official route.
Hidden Value is an experimental evidence summary, not an investment-style score or guarantee of employability. It only uses explicit current listing evidence and does not infer that an unmentioned qualification is unnecessary.
Explainable opportunity highlight
Why this opportunity stands out
These are supported signals from the current listing and comparison sample—not a guarantee that this is the best job for you.
Its annualized salary midpoint is at or above about 87% of the current comparable disclosed-salary sample.
The source provides structured salary information with a comparatively focused range, improving the usefulness of pay comparisons.
The listing was posted about 3 days ago.
Compensation intelligence
How competitive is this pay?
Above-market pay in current sample
The annualized midpoint is above the 75th percentile boundary of the current comparable sample.
The highlighted band is the middle 50% of the current comparable sample after the outlier guard. The dark marker is this job’s annualized salary midpoint.
Why this analysis?
- This score reflects the current advertised-pay distribution for comparable active jobs in the same currency. It measures pay position, not overall job quality.
- Salary confidence: High. The configured source supplied structured salary fields, a usable currency and a focused comparison value.
- Range quality: Focused salary range.
Employer compensation communication
Pay transparency at Maven Clinic
Mixed current pay transparency
This score uses the employer’s current visible listings and combines how often pay is disclosed with how useful those ranges are. Bonus, equity and benefit mentions are shown separately and do not raise the score.
This pattern comes from the employer’s current visible vacancies. It describes hiring and pay transparency in those listings, not employee satisfaction or a permanent judgement of the employer.
Current employer intelligence
Maven Clinic — current opportunity snapshot
Employer Evidence Profile
How often this employer’s current visible sampled vacancies state decision-critical information. These percentages describe evidence coverage, not employer quality.
Current sampled listings with advertised compensation evidence.
Current sampled listings whose work arrangement is clearer than unknown.
Current sampled listings with a supported country signal.
Current sampled listings with an explicit closing time.
Current sampled listings with a usable posting date.
Current sampled listings that explicitly indicate confirmed, possible or unavailable sponsorship evidence.
Current sampled listings with an explicit relocation signal.
Low coverage means the current visible listings state the information less often. It does not prove that the employer lacks the policy, benefit or support.
Common current occupation families: Customer success (5) · Software engineering (1) · Executive (1)
Visible seniority mix: Senior / lead (2) · Leadership (5)
Current employment-type mix: Full time (9) · Contract (1)
Most visible hiring countries in this sample: United States (4)
Other current roles from this employer
Head of Member Growth (B2B2C)
Anywhere in the World
Leadership · Worldwide remoteDirector PM, Payments & Client Success
Anywhere in the World
Leadership · Worldwide remoteCare Coach
USA
Senior / lead · Region-restricted remoteCustomer Success Director
USA
Leadership · Region-restricted remoteThese are other current vacancies visible from the same employer, not endorsements or evidence of future hiring plans.
There are not yet five current disclosed salaries in one currency, so an employer pay median would be too thin to be useful.
Questions worth asking this employer
- What compensation range applies to this role, and which parts of total compensation are fixed versus variable?
- If work authorization matters to you, what sponsorship policy applies to this specific role and location?
- If a move is required, is relocation assistance available for this position?
These questions are prompted by missing or thin evidence in the employer’s current visible vacancies. Missing evidence is not treated as a negative judgement.
This employer snapshot uses the employer’s current visible listings. Remote and sponsorship rates use only vacancies with explicit evidence, while missing information stays unknown. Salary medians are shown separately by currency and need at least five disclosed salaries. Zero confirmed sponsorship means none was explicitly found in this sample, not that sponsorship is unavailable.
This snapshot describes the employer’s current visible vacancies—things such as pay disclosure and work arrangement. It is not an employee-satisfaction or hiring-quality rating, and different currencies stay separate.
Work-location intelligence
Remote Freedom
Remote with some uncertainty or restrictions
Why this score?
- The role is remote but the source identifies a country or regional restriction.
Location restrictions detected
- Geographic eligibility is restricted to a country or region.
Remote Freedom measures observable location flexibility only. Unknown work-location information remains unscored. Timezone wording is penalized only when it appears restrictive; general collaboration across time zones is not treated as a restriction. A score does not guarantee legal work eligibility, payroll availability or visa sponsorship.
International applicant intelligence
Visa & relocation signals
Sponsorship status is shown only when the listing provides clear enough wording. Employer history or headquarters location is not used to guess an answer.
The available listing details do not contain a clear enough sponsorship statement.
The available listing details do not contain a clear enough relocation statement.
Tradeoff check
What’s the catch?
These are visible conditions worth checking before treating the headline compensation as the whole story:
- This is remote work with a geographic restriction, not a worldwide-remote vacancy.
Current alternatives
Better-paying alternatives
These current roles show a materially higher annualized salary midpoint in the same broad occupation and currency. Similar seniority, country, work arrangement, employment type and recency are preferred where possible; higher pay alone does not make an alternative a better fit.
Principal Engineer, Applied AI (Fullstack/Backend)
hims & hers · USA
Region-restricted remoteWhy comparable: Same seniority band · Same country · Similar work-location arrangement
Software Engineer, Infrastructure Security
OpenAI · USA
Region-restricted remoteWhy comparable: Same seniority band · Same country · Similar work-location arrangement
Principal Site Reliability Engineer, Platform Engineering: Dedicated
GitLab · Canada, UK, USA
Region-restricted remoteWhy comparable: Same seniority band · Same country · Similar work-location arrangement
Alternatives are drawn from the current inventory rather than presented as application recommendations. A pay difference needs to be meaningful—about 3% or more at the midpoint—and different currencies are not compared.
Application-path intelligence
What can we see about the application process?
Provider-mediated application path
The current application path comes through a publisher or aggregator. The destination may still lead to an employer-authorized hiring system, but that is not clear enough to assume.
Current destination: jobicy.com · HTTPS
No additional required application step is clear in the available listing text. This does not mean the external application is one-click or friction-free.
Application effort is estimated from visible listing and source details. Optional steps are kept separate from mandatory ones, and the external form may contain additional requirements that are not visible here.
Application safety context
Application safety check
Basic application-safety context available
The current application destination has a basic transport-safety signal such as HTTPS. This does not verify the employer, vacancy, recruiter or application process.
Evidence checked: Source provenance · Application destination · Listing wording
Observable transport-safety signals
- The available application destination uses HTTPS.
Before you share money or sensitive information
- Confirm the vacancy on the employer’s official careers site when practical, especially if a recruiter contacts you outside the listed application path.
- Check that recruiter email domains and application destinations are consistent with the employer or an identifiable recruiting provider.
- Do not pay application, processing, training or equipment fees merely to be considered for a job.
- Do not send cryptocurrency, gift cards, online-banking credentials or PINs as part of an application.
- Treat unusually fast offers or interviews conducted only through informal messaging channels as reasons to verify the employer independently.
This is a limited safety screen, not employer verification and not a fraud determination. Never send money, cryptocurrency, passwords or sensitive banking credentials merely because a listing appears on a job platform.
Original listing details
The section below comes from the listing source. The decision sections above use the job’s structured pay, location, qualification, mobility and application details to give you additional context.
Maven Clinic is the world's largest virtual clinic for women and families on a mission to make healthcare work for all of us. Through Maven Enterprise, the company partners with more than 2,300 employers and health plans to provide end-to-end women's and family health programs spanning fertility and family building, maternity and newborn care, parenting and pediatrics, and menopause and midlife — improving clinical outcomes, reducing healthcare costs, and expanding equitable access to high-quality care at scale. Through its consumer platform, Maven provides direct access to virtual care across 30+ specialties, as well as dedicated hormone and GLP-1 care programs purpose-built for women. Founded in 2014 by CEO Kate Ryder, Maven Clinic has raised more than $425 million from leading healthcare and technology investors including General Catalyst, Sequoia, Dragoneer Investment Group, Oak HC/FT, StepStone Group, Icon Ventures, and Lux Capital. Recognized for innovation and industry leadership, Maven has been named to the TIME100 Most Influential Companies, CNBC Disruptor 50, Fast Company's Most Innovative Companies, and FORTUNE Best Places to Work. Learn more at mavenclinic.com
An award-winning culture working towards an important mission – Maven Clinic is a recipient of over 30 workplace and innovation awards, including:
- TIME 100 Most Influential Companies (2023, 2026)
- Fortune Change the World (2024)
- CNBC Disruptor 50 List (2022, 2023, 2024)
- Fortune Best Workplaces for Millennials (2024)
- Fortune Best Workplaces in Health Care (2024)
- Fast Company Most Innovative Companies (2020, 2023)
- Fortune Best Workplaces NY (2020, 2021, 2022, 2023, 2024)
What You’ll Do
Security Platform Engineering
- Design and implement scalable infrastructure supporting HIPAA, SOC 2, and ISO 27001 compliance
- Build and maintain systems for identity, authentication, and access management (Okta / GCP IAM / Auth0/ OPA)
- Implement observability and anomaly detection across microservices, data stores, and SaaS platforms
- Establish Zero Trust principles and enforce least-privilege access company-wide
- Develop compliance observability dashboards and automated evidence collection
Security Automation & Tooling
- Create self-service security tools that integrate with developer workflows (GitLab CI/CD, Terraform)
- Automate onboarding/offboarding, access reviews, and approvals
- Integrate software-supply-chain security (SBOM, dependency scanning)
- Develop or adopt AI-assisted security tooling to proactively identify risks
- Automate policy enforcement, SAST/DAST scans, and compliance verification
Application & Data Security
- Lead threat modeling and security architecture reviews for new products and services
- Partner with product and data teams to embed secure-by-default design patterns
- Ensure encryption, access tracking, and secure data handling across PHI workflows
- Contribute to incident response, post-mortems, and continual improvement of security posture
Leadership & Collaboration
- Act as Maven’s technical authority for security engineering
- Mentor peers and promote secure coding and architecture practices
- Partner cross-functionally (Engineering, Compliance, Clinical, Legal) to align on security strategy
- Champion an engineering culture of transparency, accountability, and continuous improvement
What You’ll Bring
Required
- 8+ years of software engineering experience, including 3+ in security infrastructure or application security
- Proven ability to design and implement large-scale, distributed, cloud-native systems
- Strong coding proficiency in Python, TypeScript, Go and/or Rust
- Deep understanding of cloud security (GCP preferred; AWS/Azure welcome)
- Experience with Kubernetes, containers, and infrastructure-as-code (Terraform)
- Familiarity with security testing frameworks and secure SDLC principles
- Excellent communication and documentation skills
Preferred
- Expertise in Zero Trust architectures, authentication/authorization frameworks, and data-loss prevention
- Experience with security compliance automation (SOC 2, ISO 27001, PCI-DSS, NIST)
- Background in data security telemetry and threat detection
- Familiarity with AI/ML security and AI-assisted analysis tools
- Exposure to supply-chain security and CI/CD pipeline hardening
- Certifications (CISSP, GCP Professional Cloud Security Engineer, OSCP) a plus
What Makes You a Great Fit
- You take a pragmatic, automation-first approach to solving security problems
- You balance rigor with velocity, enabling teams to move quickly without compromising trust
- You communicate clearly with both technical and non-technical stakeholders
- You’re curious, adaptable, and eager to lead initiatives from concept to production
- You care deeply about our mission—building safer, smarter healthcare for women and families
The base salary range for this role is $221,000 - $260,000 per year. You will also be entitled to receive equity and benefits. Individual pay decisions are based on a number of factors, including qualifications for the role, experience level, and skillset.
Maven embraces a flexible hybrid work model. Our teams primarily operate from the New York Metropolitan area, NY, and remotely via San Francisco/Bay Area, CA, Seattle, WA. For those in our New York City office, we encourage in-person collaboration by requiring team members to work onsite three days a week (Tuesday, Wednesday, Thursday). For those based in Boston, DC, Chicago, Seattle, and San Francisco, we encourage in-person collaboration by requiring team members to attend monthly Work Together Days within these cities. This policy aims to balance remote work flexibility with the benefits of face-to-face interaction.
At Maven we believe that a diverse set of backgrounds and experiences enrich our teams and allow us to achieve above and beyond our goals. If you do not have experience in all of the areas detailed above, we hope that you will share your unique background with us in your application and how it can be additive to our teams.
Benefits That Work For You
Our benefits are designed to support your health, well-being and career development, helping you thrive both personally and professionally. We remain focused on providing a competitive benefits package for our employees. On top of standards such as employer-covered health, dental, and insurance plan options, we offer an inclusive approach to benefits:
- Maven for Mavens: access to the full platform and specialists, including care for mental health, reproductive health, family planning and pediatrics.
- Whole-self care through wellness partnerships
- Hybrid work, in office meals, and work together days
- 16 weeks 100% paid parental leave and new parent stipend (for Mavens who've been with us for 1 year+)
- Annual professional development stipend and access to a personal career coach through Maven for Mavens
- 401K matching for US-based employees, with immediate vesting
These benefits are applicable to Maven Clinic Co., US-based, full-time employees only. 1099/Contract Providers are ineligible for these benefits.
Maven is an affirmative action and equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, disability, age, sexual orientation, gender identity, national origin, veteran status, or genetic information. Maven is committed to providing access, equal opportunity and reasonable accommodation for individuals with disabilities in employment, its services, programs, and activities. Maven Clinic interview requests and job offers only originate from an @mavenclinic.com email address (e.g jsmith@mavenclinic.com). Maven Clinic will never ask for sensitive information to be delivered over email or phone. If you receive a scam issue or a security issue involving Maven Clinic please notify us at: security@mavenclinic.com. For general and additional inquiries, please contact us at careers@mavenclinic.com.
Listing provenance
Where did this job come from?
See where this vacancy came from and whether more than one current source can still support it. Source names help with traceability and attribution; they are not endorsements or guarantees.
At least one enabled source recently observed the vacancy. The source chain is traceable, but this is not independent employer verification.
- Continuity
- One recent renewable source
- Source-class independence
- One renewable source class
- Last source observation
- Observed in the current source window
This records when High Paid Job last observed the vacancy in source evidence. It confirms source presence, not that the employer edited the vacancy at that time.
- 1 enabled source recently observed this vacancy.
Source confidence is about traceability and continuity. It is separate from application safety and should not be read as an employer reputation rating.
The vacancy is supplied by an external job publisher. Source information helps show where the listing came from; it is not a guarantee about the employer or vacancy.
Listing source: Jobicy. Destination: jobicy.com. The application opens in a new tab so you can keep this report open.