Easy Apply
Easy Apply
As a Senior Security Engineer at Ro, you'll lead SaaS security posture management and data loss prevention, defining standards and automating workflows to secure SaaS platforms, ensuring compliance and improving security maturity while collaborating across teams.
Ro is a direct-to-patient healthcare company with a mission of helping patients achieve their health goals by delivering the easiest, most effective care possible. Ro is the only company to offer nationwide telehealth, labs, and pharmacy services. This is enabled by Ro's vertically integrated platform that helps patients achieve their goals through a convenient, end-to-end healthcare experience spanning from diagnosis, to delivery of medication, to ongoing care. Since 2017, Ro has helped millions of patients in nearly every single county in the United States, including 99% of primary care deserts.
Ro is consistently recognized as a top workplace in Health Care, in New York, and for Women and Parents—earning more than 20 honors from Fortune, Great Place to Work, and PEOPLE since 2021. In 2025 alone, we ranked top 5 among medium workplaces in Health Care and New York, and top 50 nationwide.
As a Senior Security Engineer, Enterprise SaaS, you’ll serve as Ro’s hands-on technical lead and builder for SaaS security posture management (SSPM) and data loss prevention (DLP). You’ll define the standards, automation, and monitoring that keep our SaaS platforms secure, compliant, and reliable as the business scales. This role blends architecture with execution: you’ll engineer hands-on solutions and automated workflows while guiding how Ro integrates, governs, and secures numerous SaaS services across the enterprise. You’ll partner across Security Operations, IT, GRC, and Product Security to shape a unified SaaS security strategy that keeps our people productive and patient data protected.
What You’ll Do
- Own the architecture, implementation, and continuous improvement of Ro’s SSPM and DLP platforms driving security maturity across our robust SaaS landscape.
- Define and evolve SaaS security standards, access models, and configuration baselines that balance control with business agility.
- Engineer the SaaS lifecycle: Build scalable SaaS lifecycle automations, ranging from posture monitoring and alerting to end-to-end remediation workflows using Tines or similar orchestration platforms.
- Partner across teams to embed SaaS security into identity management, onboarding/offboarding, and vendor risk processes.
- Collaborate with Security Operations to investigate SaaS-related alerts, ensuring rapid, documented, and systemic remediation.
- Lead the integration of SaaS controls into SIEM and SOAR systems (e.g., Splunk, Tines), ensuring actionable telemetry and streamlined response.
- Contribute to compliance alignment, ensuring SSPM and DLP controls satisfy HIPAA,HITRUST and SOC 2 requirements.
- Mentor peers and share expertise across Security and IT teams, elevating overall SaaS security awareness and discipline.
What You’ll Bring
- 5+ years of experience in Security Engineering or Cloud Security roles, with expertise in SaaS ecosystems, automation, and data protection.
- Proven success implementing and managing SSPM and DLP technologies such as AppOmni, Obsidian, BetterCloud, Nightfall, Netskope, etc.
- A sharp analytical mindset with the ability to ask the right questions to uncover hidden risks, coupled with the judgment to rationalize complex SaaS features against security policies and risk tolerance.
- Demonstrated experience integrating SaaS controls into SIEM/SOAR systems and automating detection, response, and reporting.
- Working knowledge of data classification, privacy, and governance frameworks relevant to healthcare or regulated industries.
- Excellent communication and collaboration skills — able to influence both technical and executive stakeholders.
- A builder’s mindset — practical, automation-oriented, and focused on delivering scalable, measurable outcomes.
- Bonus: direct experience supporting HIPAA, HITRUST or SOC 2 compliance, or prior work securing cloud-first healthcare or fintech environments.
We’ve Got You Covered
- Full medical, dental, and vision insurance + OneMedical membership
- Healthcare and Dependent Care FSA
- 401(k) with company match
- Flexible PTO
- Wellbeing + Learning & Growth reimbursements
- Paid parental leave + Fertility benefits
- Pet insurance
- Student loan refinancing
- Virtual resources for mindfulness, counseling, and fitness
The target base salary for this position ranges from $153,400 to $186,000, in addition to a competitive equity and benefits package (as applicable). When determining compensation, we analyze and carefully consider several factors, including location, job-related knowledge, skills and experience. These considerations may cause your compensation to vary.
Ro recognizes the power of in-person collaboration, while supporting the flexibility to work anywhere in the United States. For our Ro’ers in the tri-state (NY) area, you will join us at HQ on Tuesdays and Thursdays. For those outside of the tri-state area, you will be able to join in-person collaborations throughout the year (i.e., during team on-sites).
At Ro, we believe that our diverse perspectives are our biggest strengths — and that embracing them will create real change in healthcare. As an equal opportunity employer, we provide equal opportunity in all aspects of employment, including recruiting, hiring, compensation, training and promotion, termination, and any other terms and conditions of employment without regard to race, ethnicity, color, religion, sex, sexual orientation, gender identity, gender expression, familial status, age, disability and/or any other legally protected classification protected by federal, state, or local law.
Ro is committed to providing reasonable accommodations for qualified individuals with disabilities in our application and interview process. If you require a reasonable accommodation in the application or interview process, please contact us at [email protected].
See our California Privacy Policy here.
Top Skills
Appomni
Bettercloud
Dlp
Netskope
Nightfall
Obsidian
SaaS
Splunk
Sspm
Tines
Similar Jobs at Ro (Ro.co)
.png)
5 Days Ago
Easy Apply
Easy Apply
Healthtech • Pharmaceutical • Telehealth
The Manager of Training & Quality Assurance will lead the strategy for high-quality support across Ro's non-clinical Member Experience teams, focusing on onboarding, training, and quality assurance frameworks to enhance patient experiences.
Top Skills:
Ai-Enabled SolutionsCRMLmsZendesk
8 Days Ago
Easy Apply
Easy Apply
Healthtech • Pharmaceutical • Telehealth
The Senior Manager will review advertising for FDA compliance, support claims development, and maintain advertising guidelines while collaborating across teams.
Top Skills:
Advertising ComplianceFda RegulationsMarketing RegulationsTelehealth
Healthtech • Pharmaceutical • Telehealth
Manage inventory health across a multi-node fulfillment network, handle procurement, and optimize supply chain processes for effective patient care.
Top Skills:
ExcelGoogle SheetsLookerNetSuite
What you need to know about the San Francisco Tech Scene
San Francisco and the surrounding Bay Area attracts more startup funding than any other region in the world. Home to Stanford University and UC Berkeley, leading VC firms and several of the world’s most valuable companies, the Bay Area is the place to go for anyone looking to make it big in the tech industry. That said, San Francisco has a lot to offer beyond technology thanks to a thriving art and music scene, excellent food and a short drive to several of the country’s most beautiful recreational areas.
Key Facts About San Francisco Tech
- Number of Tech Workers: 365,500; 13.9% of overall workforce (2024 CompTIA survey)
- Major Tech Employers: Google, Apple, Salesforce, Meta
- Key Industries: Artificial intelligence, cloud computing, fintech, consumer technology, software
- Funding Landscape: $50.5 billion in venture capital funding in 2024 (Pitchbook)
- Notable Investors: Sequoia Capital, Andreessen Horowitz, Bessemer Venture Partners, Greylock Partners, Khosla Ventures, Kleiner Perkins
- Research Centers and Universities: Stanford University; University of California, Berkeley; University of San Francisco; Santa Clara University; Ames Research Center; Center for AI Safety; California Institute for Regenerative Medicine
