✨ From vibe coding to vibe deployment. UBOS MCP turns ideas into infra with one message.

Learn more
Andrii Bidochko
  • Updated: February 19, 2026
  • 6 min read

Metriport Seeks Senior Security Engineer to Strengthen Healthcare Data Platform

Metriport is actively hiring a Senior Security Engineer to lead security initiatives for its open‑source health‑tech platform, offering a competitive salary of $160K‑$220K and the chance to shape the future of real‑time patient data exchange.

Metriport Senior Security Engineer
Join Metriport’s mission‑driven team as a Senior Security Engineer.

Metriport at a Glance: Health‑Tech Innovation Meets Open‑Source Intelligence

Founded in 2022, UBOS homepage describes Metriport as an open‑source platform that aggregates and normalizes patient data from every major U.S. healthcare IT system. By turning fragmented records into a unified, query‑able data lake, Metriport empowers providers, payers, and researchers to act on real‑time insights for over 300 million individuals.

The company has already secured multi‑million ARR, boasts more than 100 enterprise customers—including Strive Health, Circle Medical, and Brightside Health—and enjoys backing from top venture capital firms. Its rapid growth is driven by a lean, founder‑heavy engineering culture that prizes autonomy, speed, and relentless focus on impact.

Key Metrics

  • 100+ paying customers
  • 300 M+ individuals covered
  • Multi‑million ARR within 2 years
  • YC‑backed founders

Core Technologies

  • Node.js & TypeScript for backend services
  • React for modern UI experiences
  • AWS (ECS, Fargate, Lambda, IAM, KMS, WAF)
  • PostgreSQL, DynamoDB, Snowflake, FHIR servers

Senior Security Engineer – Role Overview

The Senior Security Engineer will be the security champion for Metriport’s platform, responsible for designing, implementing, and maintaining end‑to‑end security controls across the stack. This role sits at the intersection of product, engineering, and compliance, reporting directly to the CTO and collaborating closely with the Go‑to‑Market team.

Core Responsibilities

  • Define and evangelize security best practices across all engineering squads.
  • Architect and deliver enterprise‑grade audit logging, RBAC, and secret‑management solutions.
  • Lead security assessments for customers, including SOC 2, HIPAA, and HITRUST questionnaires.
  • Integrate SCA, SAST, and DAST tools into CI/CD pipelines using AWS CodeBuild and GitHub Actions.
  • Mentor developers on secure coding, threat modeling, and incident response.
  • Collaborate with product managers to embed security into feature design from day one.

Technology Stack & Tools

Category Technologies / Tools
Programming Node.js, TypeScript, Go (for internal services)
Cloud & Infra AWS (IAM, KMS, WAF, Lambda, ECS/Fargate), CDK, Terraform
Security Controls mTLS, RSA, HMAC, OAuth2, SSO, MFA, VPN, FIPS
Compliance Frameworks HIPAA, SOC 2, NIST, HITRUST, FedRAMP
Scanning & Testing Snyk, SonarQube, OWASP ZAP, Trivy

Location & Compensation

The position is based in San Francisco, CA, with a hybrid model that allows flexible remote work. The salary range is $160,000 – $220,000 plus equity, comprehensive health benefits, 401(k) matching, unlimited PTO, and a MacBook stipend.

Who Should Apply? – Required Qualifications & Experience

Metriport seeks a security leader who thrives in fast‑moving, founder‑centric environments. The ideal candidate will have:

  • 6+ years of hands‑on security engineering experience, preferably in SaaS or health‑tech.
  • Deep expertise in cloud security, especially AWS IAM, KMS, and WAF.
  • Proven track record implementing SOC 2, HIPAA, or HITRUST compliance programs.
  • Strong command of authentication protocols (OAuth2, mTLS, JWT) and cryptographic primitives.
  • Experience with secret management solutions (HashiCorp Vault, AWS Secrets Manager).
  • Fluency in CI/CD security tooling (SCA, SAST, DAST) and automated remediation.
  • Ability to write production‑grade Node.js/TypeScript code and conduct secure code reviews.
  • Excellent communication skills for cross‑functional collaboration and customer‑facing security assessments.

Bonus points are awarded for familiarity with IHE profiles (ATNA, CT, XUA), mobile device management (MDM), and experience building security‑first APIs for health data exchange.

Benefits, Culture, and Why Metriport Stands Out

Metriport’s culture is built on three pillars: impact, autonomy, and intensity. The team works six days a week in the office but enjoys the freedom to shape personal schedules, ensuring high output without burnout.

Compensation & Perks

  • Competitive base salary ($160K‑$220K) + equity.
  • Full‑family Platinum health, dental, and vision coverage.
  • 401(k) with company match.
  • Flexible remote‑first work model.
  • Complimentary meals on‑site (breakfast, lunch, dinner) and quarterly off‑sites.
  • MacBook Pro and a $1,000 annual learning stipend.
  • Unlimited PTO – we trust you to rest when needed.

Team Dynamics

The engineering team is predominantly composed of former founders and YC alumni, fostering a “get‑shit‑done” mentality. Decision‑making is flat, and bureaucracy is minimal. Security is treated as a product feature, not an afterthought.

Metriport also encourages cross‑functional learning. For example, engineers often experiment with AI‑driven tools from AI marketing agents to prototype security‑aware notifications, or leverage the Workflow automation studio to orchestrate incident‑response playbooks.

Take the Next Step – Apply Today

If you’re ready to lead security for a high‑growth health‑tech startup, apply now through the original job posting. While you’re exploring, you might also be interested in other resources that can accelerate your career:

Whether you’re a seasoned security veteran or an ambitious engineer ready to step up, Metriport offers a platform where your work directly improves patient outcomes and protects sensitive health data at scale.

Why This Opportunity Matters for Security Professionals

For those searching for Senior Security Engineer roles in the health tech space, Metriport combines a mission‑driven product with a startup’s agility and the resources of a well‑funded venture. The position ticks every box for professionals interested in security engineering, Node.js, TypeScript, and AWS while offering exposure to HIPAA‑compliant environments and cutting‑edge compliance frameworks.

By joining Metriport, you’ll not only advance your career but also contribute to a platform that is reshaping how healthcare data is accessed, shared, and protected—making it a compelling choice for anyone looking for San Francisco tech jobs that blend impact with innovation.

Keywords: Senior Security Engineer, Metriport, health tech jobs, security engineering, Node.js, TypeScript, AWS, San Francisco tech jobs, remote security roles, cybersecurity careers.


Andrii Bidochko

CTO UBOS

Andrii Bidochko is an AI entrepreneur and researcher focused on AI agents, reinforcement learning, and autonomous systems. He writes about the technologies shaping the future of machine intelligence, from frontier models and agent architectures to real-world AI applications.

Sign up for our newsletter

Stay up to date with the roadmap progress, announcements and exclusive discounts feel free to sign up with your email.

Sign In

Register

Reset Password

Please enter your username or email address, you will receive a link to create a new password via email.