<div class="content-intro"><p><span style="font-family: verdana, geneva, sans-serif; font-size: 12pt;"><strong><span data-contrast="none">Who We Are</span></strong></span></p> <p><span style="font-family: verdana, geneva, sans-serif; font-size: 12pt;">Imagine Pediatrics is a tech enabled, pediatrician led medical group reimagining care for children with special health care needs. We deliver 24/7 virtual first and in home medical, behavioral, and social care, working alongside families, providers, and health plans to break down barriers to quality care. We do not replace existing care teams; we enhance them, providing an extra layer of support with compassion, creativity, and an unwavering commitment to children with medical complexity.</span></p></div><p><span style="font-family: verdana, geneva, sans-serif; font-size: 12pt;"><strong><span data-contrast="auto">What You’ll Do</span></strong><span data-ccp-props="{"134245529":true,"201341983":0,"335559740":240}"> </span></span></p> <p><span style="font-family: verdana, geneva, sans-serif; font-size: 12pt;"><span data-contrast="none">As Principal Security Engineer with Imagine Pediatrics, you will set the technical vision for how we protect our systems, our data, and the children and families who trust us with their care. You will serve as a trusted security advisor to the VP, Information Security and work across the business to make secure the default way we build and run technology, partnering closely with Engineering on DevSecOps strategy and architectural improvements.. You will stay hands-on with our hardest problems while raising the bar for the security team and the engineers around it.</span><span data-ccp-props="{"335559739":0}"> </span></span></p> <p><span style="font-family: verdana, geneva, sans-serif; font-size: 12pt;"><span data-contrast="none">You will: </span><span data-ccp-props="{"335559739":0}"> </span></span></p> <ul> <li style="font-family: verdana, geneva, sans-serif; font-size: 12pt;"><span style="font-family: verdana, geneva, sans-serif; font-size: 12pt;"><span data-contrast="none">Set the technical vision for the security stack, including endpoint, email, data loss prevention, vulnerability management and penetration testing, network, application, and data security, and ensure it aligns with business and clinical strategy</span><span data-ccp-props="{"335559739":0}"> </span></span></li> <li style="font-family: verdana, geneva, sans-serif; font-size: 12pt;"><span style="font-family: verdana, geneva, sans-serif; font-size: 12pt;"><span data-contrast="none">Define long-term cloud and identity security strategy across Microsoft Azure/EntraID and Amazon Web Services (AWS), including privileged access, phishing-resistant MFA, and governance of non-human identities such as AI agents, service accounts, and API keys, shaping secure infrastructure design patterns that influence company-wide technical decisions</span><span data-ccp-props="{"335559739":0}"> </span></span></li> <li style="font-family: verdana, geneva, sans-serif; font-size: 12pt;"><span style="font-family: verdana, geneva, sans-serif; font-size: 12pt;"><span data-contrast="none">Lead security architecture review and threat modeling for Care Hub and connected services, including Medplum application-layer controls (FHIR access policies, SMART scopes, Bots, and custom code) and data platforms such as Snowflake</span><span data-ccp-props="{"335559739":0}"> </span></span></li> <li style="font-family: verdana, geneva, sans-serif; font-size: 12pt;"><span style="font-family: verdana, geneva, sans-serif; font-size: 12pt;"><span data-contrast="none">Define DevSecOps strategy and standardize security gates across the SDLC and CI/CD pipeline, building on GitHub Advanced Security, OWASP Top 10 practices, software bills of materials, and prioritization of CISA Known Exploited Vulnerabilities</span><span data-ccp-props="{"335559739":0}"> </span></span></li> <li style="font-family: verdana, geneva, sans-serif; font-size: 12pt;"><span style="font-family: verdana, geneva, sans-serif; font-size: 12pt;"><span data-contrast="none">Serve as the senior technical escalation point (including in the on-call rotation) for the most complex and highest-stakes security events and strengthen incident playbooks, ransomware and critical-SaaS exercises, and restoration testing against recovery targets</span><span data-ccp-props="{"335559739":0}"> </span></span></li> <li style="font-family: verdana, geneva, sans-serif; font-size: 12pt;"><span style="font-family: verdana, geneva, sans-serif; font-size: 12pt;"><span data-contrast="none">Monitor and advise on the evolving threat landscape facing healthcare including AI-enabled and agentic attacks and its implications for business strategy</span><span data-ccp-props="{"335559739":0}"> </span></span></li> <li style="font-family: verdana, geneva, sans-serif; font-size: 12pt;"><span style="font-family: verdana, geneva, sans-serif; font-size: 12pt;"><span data-contrast="none">Ensure the organization can accurately demonstrate its security posture to payors, regulators, auditors, and other third parties, building documentation and evidence pipelines, including AI-assisted ones, that scale with our HITRUST, HIPAA, and NIST compliance requirements.</span><span data-ccp-props="{"335559739":0}"> </span></span></li> <li style=