--- title: 'Staff Security Engineer at OpenLoop Health' canonical: 'https://feeny.ai/job/staff-security-engineer-openloop-health-united-states-khfbh8at7ab3' type: 'job' last_seen: '2026-10-15' --- # Staff Security Engineer at OpenLoop Health - **Company:** OpenLoop Health - **Location:** United States - **Employment:** full-time - **Work type:** remote - **Posted:** 2026-10-07 - **Last confirmed live:** 2026-10-15 - **Apply:** https://jobs.ashbyhq.com/openloophealth/9e6e2c30-4304-4f9f-8bd7-53dde2ce358f ## Job description ## About OpenLoop OpenLoop was co-founded by CEO, Dr. Jon Lensing, and COO, Christian Williams, with the vision to bring care anywhere. Our telehealth support solutions are thoughtfully designed to streamline and simplify go-to-market care delivery for companies offering meaningful virtual support to patients across an expansive array of specialties, in all 50 states. ## About the Role OpenLoop’s mission is to bring care anywhere by powering telehealth solutions at scale. We deliver white-labeled clinical and operational infrastructure that helps companies scale virtual care across all 50 states: telehealth delivery, clinician staffing, licensing, payer coverage, and revenue cycle management. Our clients run on our platform under their own brand, which means their patients’ trust depends on how well we protect it. We operate in a regulated environment (HIPAA, HITRUST, SOC 2) with protected health information in scope across much of the business — security here is not a checkbox, it is part of how we deliver care. We’re hiring a Staff Security Engineer to own and mature the security of the systems our workforce depends on every day, with a focus on endpoints and email. You’ll be a hands-on generalist with deep engineering expertise in those two areas, and you’ll set the technical bar for them across OpenLoop and our subsidiaries. Security Architecture & Engineering (SAE) builds and owns the security platform; our Security Operations team consumes it for detection and response. In this role you engineer, deploy, and harden the controls, and you partner closely with SecOps so the telemetry and tooling you build actually serve their mission. At the Staff level, your impact goes beyond your own tickets. You’ll build controls that hold up for years, write the standards and baselines other engineers follow, and raise the technical bar of the team around you. ## What You’ll Do Endpoint security - Own the engineering of security controls for our macOS and Windows fleet, including device management (MDM), disk encryption, patch compliance, and local admin controls. - Engineer MDM and mobile application management (MAM) policies that protect company and PHI data on both managed devices and BYOD, including app protection, conditional access, and selective wipe. - Deploy and manage an enterprise browser to secure SaaS and web access, including data controls (copy/paste, download, print), session policies, and extension management. - Build, apply, and continuously measure CIS Benchmark baselines across the fleet. Track drift, manage documented exceptions, and produce fleet-level evidence that holds up to HITRUST and SOC 2 auditors. - Drive application control and least-privilege on endpoints without breaking the clinicians and operators who depend on them. Email security - Own email security for our Google Workspace environment: SPF, DKIM, DMARC enforcement, phishing and BEC defenses, attachment and link protection, and data loss prevention for PHI. - Tune controls to reduce real risk and false positives, and partner with SecOps on phishing triage workflows. Across the program - Write security standards, configuration baselines, and runbooks that others can follow without you in the room. - Implement and validate controls identified through threat modeling and security reviews. - Contribute to audit readiness by mapping controls to HITRUST and SOC 2 requirements and owning evidence for your domains. - Automate repetitive work. If you’ve done it twice by hand, script it. - Mentor engineers on SAE and adjacent teams, and serve as an escalation point during incidents in your domains. - Partner with IT, Engineering, Compliance, and SecOps, translating security risk into business and operational terms. - Other duties as assigned. ## Who You Are You treat patient safety and integrity as non-negotiable — speed never outruns integrity where care is involved. You own outcomes end to end, not just your part. You say the thing and explain the why, and you start from what we’re solving and why it matters now. At the Staff level that shows up as judgment other engineers borrow: you build the control that holds up, write the standard people actually follow, and leave the team more capable than you found it. Required Qualifications - 8+ years in security engineering, with a track record of owning outcomes end to end. - Deep, hands-on expertise in endpoint security and email security. - Experience deploying and operating MDM/MAM platforms (Kandji, Jamf, Intune, or similar) and email security platforms. - Experience deploying and managing an enterprise browser platform. - Hands-on experience implementing CIS Benchmarks and measuring compliance against them at fleet scale. - Exposure to network security: secure remote access (ZTNA/VPN), DNS filtering, segmentation, or firewall policy. - Working knowledge of cloud security fundamentals (AWS preferred): IAM, network controls, logging, and how workforce access reaches cloud environments. - Exposure to DevSecOps practices: infrastructure as code, CI/CD security, secrets management, or security tooling in pipelines. - Scripting ability in Python, Bash, PowerShell, or similar. - Experience working in a regulated environment (HIPAA, HITRUST, SOC 2, PCI, or similar) and producing audit evidence. - Clear written communication. You can write a standard, defend a decision, and explain a risk to a non-security executive. ## Preferred Qualifications - Healthcare or health tech experience, especially environments handling PHI. - Experience with Okta or another enterprise identity provider. - Experience supporting a multi-entity organization with subsidiaries or acquisitions. - Relevant certifications (GIAC, CISSP, OSCP, or cloud security certs) — a plus, not a requirement. ## What We Offer - Competitive compensation - Medical, Dental & Vision - Flexible Spending / Health Savings Accounts - Generous PTO and hybrid-work flexibility - 401(k) with Company Match - Life Insurance, Pet Insurance, and more Our Company We have a relatively flat organizational structure here at OpenLoop. Everyone is encouraged to bring ideas to the table and make things happen. This fits in well with our core values of Autonomy, Competence and Belonging, as we want everyone to feel empowered and supported to do their best work. Sound like a good fit? We’d love to meet you. ## About OpenLoop Health ## Company Overview - **One-liner**: OpenLoop Health provides end-to-end, white-label telehealth infrastructure that enables healthcare and non-healthcare organizations to launch and scale digital health services. - **Entity Type**: Private - **Headquarters**: Des Moines, Iowa, United States - **Founded**: 2020 - **Founders**: Dr. Jon Lensing (CEO & Co-Founder) and Christian Williams (COO & Co-Founder) ## Core Business - **Primary industry**: Digital Health / Telehealth Infrastructure - **Target customers**: B2B — Digital health companies, hospitals & health systems, health plans, employers, retail & pharmacy, and non-healthcare entities looking to add virtual care offerings. - **Mission**: To bring healing anywhere, anytime to anyone across the nation. - **Vision**: A world where healthcare is accessible, efficient, and tailored to individual needs—delivered wherever the patient may be. ## Products & Services OpenLoop offers a full-stack, white-labeled suite of services: - **Technology Platform**: HIPAA-compliant EHR with flexible API integrations, scheduling, booking, payments, and support for both synchronous and asynchronous care. AI-powered operations to streamline clinical workflows. - **Provider Staffing & Credentialing**: Access to a nationwide, NCQA-credentialed network of clinicians across 30+ specialties and 15+ languages, with full 50-state coverage. Includes licensing, credentialing, and onboarding management. - **Payer Coverage & Revenue Cycle Management (RCM)**: A network of 600+ payer contracts including Medicare and Medicaid, paired with RCM services to streamline reimbursement. - **Regulatory, Legal & Compliance Support**: End-to-end legal, financial, and compliance setup, including ongoing regulatory maintenance and expert support. - **Clinical Pathways**: Over 100 repeatable, scalable, and vetted clinical protocols (e.g., medical weight loss, HRT, urgent care, mental health). - **Diagnostic Imaging & Labs**: A platform for diagnostic image ordering, referrals, and results, plus access to a network of pharmacy and lab partners for competitive medication costs. ## Market Standing - **Valuation**: Not publicly available (private company) - **Key Metric**: Trusted by 3M+ patients annually; serves patients in all 50 states; processes thousands of patient visits per month. - **Notable Investors/Partners**: Managing board includes Jack Berkowitz, Freddie Martignetti, and Ryan Morley. Client partners span digital health companies, hospitals, health plans, and employers. - **Growth Signals**: OpenLoop saw **700% YoY growth in 2024**, appointed key executive team members (including a Chief Medical Officer, CFO, CCO, and CPO), and integrated AI technology into its operations. LinkedIn followers grew 124.8% year-over-year. ## Competitive Advantages - **Full-stack, end-to-end solution**: OpenLoop is the only white-label provider that covers clinical, administrative, regulatory, and technological needs under one roof — clients bring their brand and patients, OpenLoop handles everything else. - **Nationwide scale**: 50-state PC network, 600+ payer contracts (including Medicare/Medicaid), and a network of thousands of clinicians. - **NCQA-accredited credentialing**: A streamlined, accredited credentialing process that reduces administrative burden for clients. - **Proven, repeatable clinical pathways**: Over 100 pre-vetted, scalable protocols allow clients to launch new programs quickly and safely. - **Deep Midwest roots**: Headquarters in Des Moines, Iowa, with a commitment to building local talent and positioning Iowa as a hub for healthcare transformation. ## Strategic Focus - **AI integration**: Embedding AI to streamline clinical workflows, enhance patient support, and guide optimized care pathways. - **Expansion of clinical pathways**: Continuously developing new, ready-to-use care programs (e.g., medical weight loss, HRT, anti-aging, mental health). - **Scaling partnerships**: Serving a growing range of organizations from digital health startups to large employers and health systems. - **National reach**: Deepening 50-state coverage and payer relationships to enable truly national virtual care delivery. ## Why Work Here - **Culture & Mission**: Driven by a mission to “bring healing anywhere,” with a strong focus on expanding healthcare access. The team is described as passionate, energetic, and focused on driving long-lasting results. - **Work Environment**: Hybrid work environment with a pet-friendly office in Des Moines, Iowa. The company is deeply committed to its Iowa roots and building a skilled local workforce. - **Benefits**: Competitive salary, generous PTO, medical/dental/vision insurance, and a 401k program. - **Growth & Impact**: Employees report feeling empowered to make a lasting impact on virtual care delivery. The company saw explosive 700% YoY growth in 2024, indicating a dynamic and scaling environment. - **Leadership**: Experienced executive team including a CEO/co-founder with a personal connection to healthcare access challenges, a COO/co-founder, a CMO, CFO, CCO, CPO, and General Counsel. - **Caution**: The careers page explicitly warns of fraudulent job postings and fake recruiter outreach. Candidates should verify any role or offer by emailing fraud@openloophealth.com. ## Sources 1. [openloophealth.com](https://openloophealth.com/) 2. [openloophealth.com/careers](https://openloophealth.com/careers) 3. [openloophealth.com/team](https://openloophealth.com/team) 4. [openloophealth.com/blog/who-is-openloop-health](https://openloophealth.com/blog/who-is-openloop-health) 5. [linkedin.com/company/openloophealth](https://www.linkedin.com/company/openloophealth) ## Other roles at OpenLoop Health - [Sr. Talent Acquisition Partner](https://feeny.ai/job/sr-talent-acquisition-partner-openloop-health-united-states-3p40g477cr2y) — United States - [Clinical Informaticist](https://feeny.ai/job/clinical-informaticist-openloop-health-united-states-2ms12nps9nwf) — United States - [IT Helpdesk Technician II](https://feeny.ai/job/it-helpdesk-technician-ii-openloop-health-dallas-swzk15efb8zy) — Dallas, TX / HQ - [Sr. Compensation Partner](https://feeny.ai/job/sr-compensation-partner-openloop-health-united-states-nm9nbfg1dam8) — United States - [Director of Business Recruiting](https://feeny.ai/job/director-of-business-recruiting-openloop-health-united-states-h4z47w3wmrwj) — United States - [Senior Software Engineer](https://feeny.ai/job/senior-software-engineer-openloop-health-toronto-bmsfbmeq12gb) — Toronto, Canada - [Sr. People Project Manager](https://feeny.ai/job/sr-people-project-manager-openloop-health-united-states-a8r50nb4c3vk) — United States - [Senior IT Audit Manager](https://feeny.ai/job/senior-it-audit-manager-openloop-health-united-states-a8104yrf3k2g) — United States - [Supply Chain Quality Manager](https://feeny.ai/job/supply-chain-quality-manager-openloop-health-dallas-xqax8xwtezht) — Dallas, TX / HQ - [Sr. Supply Chain Specialist](https://feeny.ai/job/sr-supply-chain-specialist-openloop-health-dallas-00zksxwyc3wx) — Dallas, TX / HQ