Pomelo Care is the leading virtual medical practice for women and children, providing care across various stages of life. They are seeking a Senior Software Engineer, Product Security to build automation and tools that integrate security into the software development lifecycle, ensuring the protection of critical systems and patient data. Responsibilities: Design and implement auth enhancements such as magic link improvements and access/audit log features to monitor access and improve transparency. Lead the privacy engineering initiatives including DSAR integration, building automated data deletion capabilities directly into the Pomelo mobile app and our internal platform to ensure seamless compliance. Own the end-to-end pentest-to-fix lifecycle, triaging reports, writing code to fix penetration test findings, remediating SAST issues, and building systems for high-volume dependency patching with regression testing. Build secure-by-default libraries to reduce the load on core Software Engineering by creating internal libraries and patterns that make security the default path. Partner with engineering leads to conduct threat modeling and ensure secure design at the earliest stages of the development process. Help engineering squads navigate complex security use cases, translating GRC requirements into elegant code rather than manual checklists.