Senior Security Engineer Woodlands
Listed on 2026-10-11
-
IT/Tech
Cybersecurity, Information Security & Data Protection
View all jobs Senior Security Engineer The Woodlands Engineering Remote Full-time About Prahsys Prahsys is a dynamic healthcare-focused company committed to driving growth and innovation in the healthcare industry. We collaborate with leading healthcare organizations to enhance their products and amplify their market presence. With over 50 years of combined experience, our team brings deep insights into real-world practitioner challenges, allowing us to craft solutions that seamlessly integrate with existing platforms.
The opportunity is vast, with over 1,400 medical software companies in the market. We aim to put our cutting-edge products in the hands of millions of practitioners, offering tools that not only boost revenue but also optimize workflows—making the medical office more efficient and significantly reducing the administrative load on front office staff. The healthcare industry is on the brink of a transformation, and Prahsys is here to lead the way.
The future of healthcare is bright. Join us as we embark on this exciting journey to modernize the industry and deliver the next generation of healthcare solutions.
As a Lead Security Engineer at Prahsys, you will be responsible for designing, implementing, and overseeing security strategies to safeguard our products, infrastructure, and data. Initially, you will be hands-on in building security architecture and frameworks, and over time, transition into a leadership role overseeing other security engineers. You will work closely with product teams, influencing architecture decisions and ensuring secure development practices.
Your primary responsibilities will include securing cloud infrastructure, enhancing CI/CD security, performing threat modeling, and implementing security automation. You will also oversee application security, conduct risk assessments, manage vulnerability remediation, and ensure compliance with industry regulations such as HIPAA, SOC-2, and PCI-DSS.
Responsibilities
- Lead and develop security strategies for infrastructure, application, and cloud security.
- Architect and implement security frameworks for other engineers to follow.
- Secure cloud infrastructure (Google Cloud Platform) and containerized environments (Docker).
- Improve CI/CD security, integrating SAST, DAST, and security automation.
- Conduct threat modeling, risk assessments, and penetration testing.
- Ensure secure software development practices, performing security code reviews.
- Oversee vulnerability management, incident response, and security monitoring.
- Manage a team of 2-8 security engineers, providing technical mentorship and oversight.
- Establish security policies, best practices, and compliance standards (HIPAA, SOC-2, PCI-DSS).
- Collaborate daily with product teams to integrate security into architecture and implementation.
- Work autonomously, making strategic security decisions while reporting to the CTO.
- 8+ years of relevant experience in security engineering.
- Experience leading security teams and mentoring engineers.
- Background in fintech or other highly regulated industries.
- Familiarity with Dev Sec Ops principles and secure software development lifecycle (SSDLC).
- Experience with security orchestration and automation tools.
- Cloud Security:
Strong expertise in Google Cloud Platform (GCP). - Container Security:
Experience securing Docker environments. - Software Development:
Hands-on programming experience across multiple languages such as Dot Net, Node.js, Python, Go, and Rust (preferred). - Security Automation & Tooling:
Ability to develop security frameworks and automate security processes. - Application Security: SAST, DAST, and manual penetration testing.
- Threat Modeling & Risk Assessments:
Proficiency in identifying and mitigating security threats. - Compliance & Regulations:
Experience with HIPAA, SOC-2 (required) and PCI-DSS (preferred).
- 5+ years of hands-on security engineering experience.
- Strong expertise in GCP & Docker security.
- Proven programming experience in multiple languages (e.g., Node.js, Python, Go, Dot Net).
- Hands-on experience with security assessments, penetration testing, and vulnerability management.
- Knowledge of compliance frameworks such as HIPAA and SOC-2.
- Frontend:
React, Typescript, Next.js - Backend:
Node.js, Laravel, Python - Database:
PostgreSQL - AI/ML:
Tensor Flow - Cloud/Hosting:
Google Cloud, Vercel, Laravel Forge, Envoyer
(If this job is in fact in your jurisdiction, then you may be using a Proxy or VPN to access this site, and to progress further, you should change your connectivity to another mobile device or PC).