Cybersecurity Engineer

h3Your mission /h3pAre you passionate about technology with a purpose? Want to make a meaningful impact on people's health? At Relu, we're growing
- and we're looking for someone like you.br/We're looking for abCybersecurity Engineer /b to own our Platform / Software security. You will:br/ /pulliBuild our ISMS from the ground up — scope, risk assessment, Statement of Applicability, and core policies — and lead us through ISO 27001 Stage 1 audit /liliGet Vanta green across every system, with a live Trust Center that takes manual security questionnaires off sales' plate for good /liliRun a penetration test and close every critical and high finding before it becomes someone else's problem /liliStand up vulnerability management across code, dependencies, containers, and Terraform — with a triaged backlog and fix deadlines that actually get met /liliHarden our AWS and Kubernetes baseline with least-privilege access, network segmentation, and threat-detection piped straight to on-call /liliWrite and tabletop-test our incident response playbook, GDPR 72-hour breach notification included, and align it with our MDR technical documentation so we run one evidence set — not two /li /ulh3Your profile /h3pbWhat you should bring to the team: /b /pulli2–5 years of hands-on cybersecurity engineering experience, including vulnerability assessment, threat modeling, and incident response /liliSolid command of AWS security — IAM policies, network segmentation, secrets management /liliProficiency with security tooling: SIEM platforms, IDS/IPS, and penetration testing frameworks like Burp Suite or Metasploit /liliExperience securing software development pipelines (SAST, DAST, dependency scanning) and working within a DevSecOps culture /liliWorking knowledge of compliance frameworks such as ISO 27001, SOC 2, or GDPR — ideally in a SaaS or healthtech context /liliAbility to write and maintain security policies, runbooks, and incident response playbooks that people actually use /li /ulbThe 'Nice-to-haves': /bulliExperience in a regulated industry — healthcare, medtech, or dental — with exposure to HIPAA or MDR requirements /liliFamiliarity with zero-trust architecture and modern identity solutions like Auth0 /liliHands-on experience with container security (Docker, Kubernetes) and IaC scanning tools like Checkov /liliRelevant certifications: CEH, OSCP, CISSP, or AWS Security Specialty /li /ulbHow you work: /bulliYou take ownership and bring a builder mindset — you're comfortable defining security practices from scratch in a fast-moving environment, not just maintaining what already exists /liliYou balance thoroughness with pragmatism — you know when to move fast and when the moment calls for slowing down and doing it right /li /ulh3Why us? /h3ulliA mission that matters: we're improving dental care and making higher-quality dentistry accessible to everyone, globally /liliA fast-growing company where your growth goes hand-in-hand with ours — real impact, real ownership, and skills in the technologies of the future /liliA driven and collaborative team /liliFun team culture: after-works, bi-weekly sports, hackathons, retreats /li /ul