Software Engineer, Full Stack (Security)

Job Description

Doximity is transforming the health care industry. Our mission is to help clinicians be more productive, informed, and connected. As a software engineer, you'll work within cross-functional delivery teams alongside other engineers, designers, and product managers in building software to help improve health care.

Our team brings a diverse set of technical and cultural backgrounds and we like to think pragmatically in choosing the tools most appropriate for the job at hand.

Here's How You Will Make an Impact

• Design and implement secure and easy-to-use tooling and abstractions for other teams to leverage.
• Help set good security posture; this includes finding bad security habits in applications and encapsulating good secure defaults into libraries/modules, creating training materials for application developers, etc.
• Help maintain our private security bug bounty program hosted on HackerOne : this involves engaging security researchers, validating security finds, determining impact/risk, awarding bounties, and fixing or coordinating remediation efforts.
• Work side-by-side with the rest of the infrastructure, application, and data teams to empower all of engineering to move quickly while meeting security requirements.
• Participate in an on-call rotation for the services owned by your team while ensuring proper monitoring, alerting, and reporting.

What we’re looking for

• You have a deep understanding of object-oriented programming language like Ruby, a web framework like Rails.
• You either have experience with security or really want to dive in headfirst and learn.
• You don’t shy away from reading oAuth specifications or getting immersed in issues with CORS, CSRF, XSS, etc.
• You have experience working with Terraform and Chef (or similar tooling).
• You are proficient with Linux/Unix, AWS, and Git.
• You are able to maintain a minimum of 5 hours overlap with 9:30 to 5:30 PM Pacific time.
• You can dedicate about two weeks per year for travel to company events.

Benefits & Perks

• Generous time off policy
  
• Comprehensive benefits including medical, vision, dental, Life/ADD, 401k, flex spending accounts, commuter benefits, equipment budget, educational resources and conference access
• Family support and planning benefits
• Pre-IPO stock incentives
• .. and much more! For a full list, see our career page

About Doximity

• Here are some of the ways we bring value to doctors
• Our web applications are built primarily using Ruby, Rails, Javascript (Vue.js), and Golang
• Our data engineering stack run on Python, MySQL, Spark, and Airflow
• Our production application stack is hosted on AWS and we deploy to production on average 50 times per day
• We have over 350 private repositories in Github containing our applications, forks of gems, our own internal gems, and open-source projects
• We have worked as a distributed team for a long time; we're currently about 65% distributed
• Find out more information on the Doximity engineering blog
• Our company core values
• Our recruiting process
• Our product development cycle
• Our on-boarding & mentorship process

We’re thrilled to be named the Fastest Growing Company in the Bay Area, and one of Fast Company’s Most Innovative Companies . Joining Doximity means being part of an incredibly talented and humble team. We work on amazing products that over 70% of US doctors (and over one million healthcare professionals) use to make their busy lives a little easier. We’re driven by the goal of improving inefficiencies in our $3.5 trillion U.S. healthcare system and love creating technology that has a real, meaningful impact on people’s lives. To learn more about our team, culture, and users, check out our careers page , company blog , and engineering blog . We’re growing fast, and there’s plenty of opportunities for you to make an impact—join us!

Doximity is proud to be an equal opportunity employer, and committed to providing employment opportunities regardless of race, religious creed, color, national origin, ancestry, physical disability, mental disability, medical condition, genetic information, marital status, sex, gender, gender identity, gender expression, pregnancy, childbirth and breastfeeding, age, sexual orientation, military or veteran status, or any other protected classification. We also consider qualified applicants with criminal histories, consistent with applicable federal, state and local law.