Lead Engineer for Security and Privacy

Want to change the face of medicine? At Blackfynn we integrate and harness clinical and research data, the expertise of the world’s top scientists and clinicians, and the power of machine learning and computational analysis, in order to enable new discoveries and treatments. A critical aspect is having a platform everyone trusts to protect their sensitive data. The Security and Privacy Lead Engineer will ensure our platform protects partner data, including personal health information. He or she will lead our efforts to achieve certification for HIPAA and HITECH compliance. What you’ll be doing: Own the process of ensuring the Blackfynn platform is compliant with all HIPAA, ISO, NIST, HITECH and other relevant guidelines, including developing and executing our strategic approach to security and privacy Work with the Engineering and Operations teams to ensure data is fully protected, both inside and outside the company, and at rest or in transit Lead the development and customization of features for encryption, auditing, and access control of private and partner data Oversee certification of compliance with ISO, NIST, HIPAA, HITECH, and related security and privacy standards Lead the development of tools for administering and auditing data access permissions across teams Foster a security-first, privacy-first mentality within the development team Work with external partners to understand and implement security and privacy solutions Desired skills: Expertise in the regulations and requirements of managing data in a HIPAA/HITECH-compliant way 5 or more years of experience in software development 2 or more years of experience with certification of software platforms for managing health data Strong understanding of software engineering fundamentals for large systems Team-oriented approach to problem solving Experience with Amazon Web Services or equivalent cloud platforms Experience in Java back-end platform development Strong knowledge of both SQL and NoSQL storage platforms Familiarity with best practices in using crypto