---
title: 'Security Engineer at Corbalt'
canonical: 'https://feeny.ai/job/security-engineer-corbalt-remote-y42k9mbzvvea'
type: 'job'
last_seen: '2026-09-23'
---

# Security Engineer at Corbalt

- **Company:** Corbalt
- **Location:** Remote
- **Employment:** full-time
- **Work type:** remote
- **Posted:** 2026-09-16
- **Last confirmed live:** 2026-09-23
- **Apply:** https://jobs.lever.co/corbalt/287e852a-34eb-489c-844c-8fc47bb84d42

## Job description

## About Corbalt

Corbalt is a technology company that partners with federal agencies to modernize and operate complex technology ecosystems. We build shared platforms, engineering foundations, and reusable services that enable mission teams to deliver software faster, operate more efficiently, and scale with confidence. Our roots trace back to the Healthcare.gov recovery effort, where we saw firsthand what talented, mission-driven teams could accomplish together. That experience shaped how we work today: solving complex technical challenges through collaboration, pragmatic engineering, and a relentless focus on delivering value. Today, we support critical healthcare modernization efforts at the Centers for Medicare & Medicaid Services (CMS), helping build and operate the platforms, tools, and services that enable teams across Medicare and Medicaid to deliver secure, resilient digital experiences. We're a remote-first team that values curiosity, kindness, ownership, and continuous learning. We enjoy solving hard technical problems, partnering closely with our clients, and building technology that makes government work better for the people who rely on it.

Contingent Position: This position is contingent upon Corbalt's successful contract award. Employment offers and start dates are dependent on the award of the associated government contract. Security Engineer We're looking for a Security Engineer who enjoys building secure software, improving engineering platforms, and helping teams deliver with confidence. You'll work closely with software engineers to integrate security into the development lifecycle, automate security practices, and build resilient cloud-native systems that support critical government services.

## Responsibilities

Integrate security into the software development lifecycle through automation, testing, and continuous improvement. Identify, investigate, and remediate application and infrastructure vulnerabilities. Develop tools and automation in Python, Go, or Terraform that improve security, developer productivity, and operational visibility (it’s not important that you know these languages). Support security assessments, compliance activities, and continuous monitoring. Contribute to security best practices across engineering teams.

## Skills

Strong software engineering fundamentals and experience writing production code. Experience with application security, DevSecOps, or cloud security. Understanding of secure software design, authentication/authorization, and common application vulnerabilities. Familiarity with at least one commonly used programming language and one infrastructure-as-code language. Strong communication and collaboration skills with engineering and technical stakeholders.

## Experience

3+ years of engineering experience Demonstrated ability to operate independently and ramp quickly in complex environments Experience supporting security assessments, compliance, or continuous monitoring in regulated environments Familiarity with federal cloud and security requirements (e.g., FISMA) Demonstrated experience operating and analyzing systems in AWS, Azure, or Google Cloud. Values Growth-oriented mindset Intrinsic motivation to learn, grow, and do great work Kindness Grit / perseverance / resilience

## Compensation & Benefits

The base salary range for this position is: $138,677 - $182,296 per year. In addition to the base salary, Corbalt offers: Medical, dental, vision benefits Profit sharing and discretionary bonuses A company 401(k) contribution equal to 3% of your salary Paid vacation, sick time, and company holidays Reimbursement for reasonable expenses that are helpful for work In-person company retreats Hiring Process The first stage is an informal conversation to learn more about each other, answer questions, and discuss the role. The second stage is a mini-project based on something we've actually worked on. The goal of this is to get an idea of what working together is like. The last stage is: a 10-20 minute presentation to the team describing what you did on a previous project and two 30 minute conversations with other people on the team to get an additional perspective on what our work is like. Other Requirements Due to contractual requirements applicants must: Be authorized to work in the United States Currently reside in the United States or its territories Have resided in the United States or its territories for three of the last five years Have at least three years of professional experience Due to contractual and security requirements, all work must be performed while physically present within the United States or its territories. Work performed while outside the U.S. or its territories is strictly forbidden. Corbalt participates in E-Verify. Upon hire, your Form I-9 information will be provided to the federal government to confirm you are authorized to work in the United States. Corbalt is an Equal Opportunity Employer, including disability and protected veteran status.

## About Corbalt

## Company Overview
- **One-liner**: Corbalt builds software infrastructure for federal agencies, enabling secure, automated, and compliant digital services in critical areas like healthcare.
- **Entity Type**: Private (bootstrapped/growth-stage; no disclosed funding rounds)
- **Headquarters**: Washington, District of Columbia, United States
- **Founded**: 2015
- **Founders**: Not publicly available (the company was formed by alumni of the HealthCare.gov tech surge)

## Core Business
- Primary industry/industries: Government IT services, digital modernization, cloud infrastructure, DevSecOps, healthcare technology
- Target customers: U.S. federal agencies (primarily the Centers for Medicare & Medicaid Services – CMS)
- Mission or purpose statement: “We build great software infrastructure” – replacing costly manual processes with automated systems to improve reliability, security, and compliance while serving the public interest.

## Products & Services
- **Automated Network Provisioning System**: A platform that automatically provisions network architecture, reducing cloud network creation time from weeks to minutes and dramatically cutting costs.
- **Shared Platforms & Engineering Foundations**: Reusable services and tools that enable mission teams to deliver software faster, operate more efficiently, and scale with confidence.
- **Security & Compliance Solutions**: Expertise in handling sensitive personal data, securing critical government assets, and achieving Authorization to Operate (ATO) – with automated compliance pipelines.
- **Advisory & Engineering Services**: Consulting on modernizing complex government technology ecosystems, with a focus on infrastructure, automation, and DevSecOps.

## Market Standing
- **Valuation/Market Cap**: Not disclosed (privately held)
- **Key Metric**: Total employees ~20 (as of 2025-2026), with 8% year-over-year growth (+2 people). No public revenue or funding figures.
- **Notable Investors/Partners**: Key clients include the Centers for Medicare & Medicaid Services (CMS). Partnered with Samtek on a CMS modernization contract (2025).
- **Growth Signals**: Won a contract to continue modernizing Medicare and Medicaid programs (2025); actively hiring for Product Manager, Software Engineer, and Security Engineer roles; expanding team with a focus on remote-first talent.

## Competitive Advantages
- **Deep Government Expertise**: Roots in the HealthCare.gov tech surge (2013) – proven ability to fix and modernize large-scale federal systems.
- **Automation-First Approach**: Automates network provisioning, compliance, and security – reducing manual toil and operational risk.
- **Security & Compliance Track Record**: Experience handling sensitive healthcare data and achieving ATOs, which is a high barrier for competitors.
- **Remote-First Model**: Access to nationwide talent pool while maintaining a close-knit, collaborative culture.

## Strategic Focus
- Continue supporting CMS cloud modernization and platform engineering efforts.
- Build reusable, compliant infrastructure that can be scaled across other federal agencies.
- Maintain a small, high-leverage team (targeting ~20–30 people) with a focus on quality over quantity.
- Deepen automation and DevSecOps capabilities to reduce cost and time for government digital services.

## Why Work Here
- **Remote-First Culture**: All-remote company with flexible work arrangements; offices in Washington DC, New York, Seattle, San Francisco, Boston, and Portland for in-person gatherings.
- **Mission-Driven Work**: Direct impact on critical healthcare systems (Medicare, Medicaid) that affect millions of Americans.
- **Compensation & Benefits**: Base salary range for Software Engineer: $126,594 – $166,412. Plus profit sharing, discretionary bonuses, 3% 401(k) company contribution, medical/dental/vision, paid vacation, sick time, and company retreats.
- **Engineering Culture**: Emphasizes curiosity, kindness, ownership, and continuous learning. Uses Go, Python, and modern cloud infrastructure. The interview process includes a mini-project and a team presentation.
- **Growth Opportunities**: Small team means engineers can take ownership of projects and work across the full stack; learning from experienced engineers with backgrounds at Bell Labs, Google, Palantir, etc.
- **Contingent Hiring Note**: Some positions (e.g., Software Engineer) are contingent upon contract award, which provides job stability once funded.

## Sources
1. [Corbalt Website](https://www.corbalt.com/)
2. [Corbalt LinkedIn](https://linkedin.com/company/corbalt)
3. [Built In Corbalt Profile](https://builtin.com/company/corbalt)
4. [Corbalt Software Engineer Job Posting](https://jobs.lever.co/corbalt/465a94cb-0573-41f7-8e30-a3003be9934b)
5. [Corbalt Career Page (Jobs)](https://jobs.lever.co/corbalt)

## Other roles at Corbalt

- [Software Engineer](https://feeny.ai/job/software-engineer-corbalt-remote-zn2f675k5d9m)
- [Security Engineer](https://feeny.ai/job/security-engineer-xbow-united-states-6tgwhda2vm09) — United States
- [Security Engineer](https://feeny.ai/job/security-engineer-cloudbeds-canada-xtp11nynf4qg) — Canada
- [Security Engineer](https://feeny.ai/job/security-engineer-people-culture-talent-san-francisco-98xn73psp5c3) — San Francisco, CA
- [Security Engineer](https://feeny.ai/job/security-engineer-relay-toronto-mq4jk00tk96r) — Toronto, Canada
- [Security Engineer](https://feeny.ai/job/security-engineer-solvd-poland-6q1e0asmhndc) — Poland
- [Security Engineer](https://feeny.ai/job/security-engineer-namespace-switzerland-56va7t2pm654) — Switzerland
- [Security Engineer](https://feeny.ai/job/security-engineer-posthog-emea-jrpa20362em6) — EMEA
- [Security Engineer](https://feeny.ai/job/security-engineer-conduct-london-6204ghmz17n3) — London, United Kingdom
- [Security Engineer](https://feeny.ai/job/security-engineer-stripe-united-states-wh08jj8yj715) — United States