Security Engineering Manager

About the role

Stedi is building a new healthcare clearinghouse that is the only headless clearinghouse and RCM engine, with every part of the product accessible via API. Developers and AI agents build their own interface on top of it. By offering modern, AI-ready APIs alongside traditional real-time and batch EDI processes, Stedi enables healthcare technology businesses and established players to exchange mission-critical transactions. The clearinghouse product and customer-first approach have set Stedi apart. Stedi was ranked by Ramp as one of the fastest-growing SaaS vendors. Stedi has lightning in a bottle: engineers and designers shipping products week in and week out; a lean business team supporting the company's infrastructure; a passion for automation and eliminating toil; and $142 million in funding from top investors like Stripe, Addition, USV, Bloomberg Beta, First Round Capital, and more. To see what we ship, watch the 2026 Stedi Keynote. To learn more about how we work, watch our founder Zack's interview with First Round Capital.

Responsibilities

• Lead and grow a high-performing security team by setting an ambitious pace with rigorous quality expectations, and hiring as the function scales.
• Oversee compliance engineering posture, ensuring processes and evidence meet SOC, HIPAA, and HITRUST requirements.
• Manage daily engineering efforts, monitoring timelines and resources to ensure projects are executed efficiently and to a high standard.
• Increase accountability across the team by setting clear performance expectations and regularly reviewing progress to ensure high standards are consistently met.
• Continuously assess vulnerabilities, perform regular risk assessments, and prioritize remediation based on actual risk to the business and customers.
• Mentor engineers and make security a shared responsibility and focus across Stedi.

Requirements

• 6+ years of experience in security or security‑adjacent roles, with at least 3+ years in a management role.
• Experience with compliance frameworks such as SOC, HIPAA, and/or HITRUST and control design.
• Hands‑on experience in application security and endpoint security.
• Exceptional written communication skills, with the ability to synthesize and clearly convey complex technical and risk information to both engineers and executives.
• Proven experience managing and fostering collaboration in a remote‑first environment, ensuring team alignment and cohesion.
• A commitment to cultivating a high‑performing team.
• High bandwidth with the ability to pay thoughtful attention to many areas simultaneously.
• Ability to context switch throughout the course of the day or week as priorities shift.
• Philosophical alignment with the Stedi Standards.

Skills

• AWS‑exclusive customer‑facing backend infrastructure.
• Serverless technologies: Lambda, API Gateway, SQS, SNS, DynamoDB, Aurora Serverless, etc.
• Infrastructure as code using CDK (TypeScript).
• Tools: GitHub, Stripe, Vanta, PagerDuty.
• Knowledge of SOC, HIPAA, HITRUST compliance frameworks.
• Application security and endpoint security expertise.