GoodRx is the leading prescription savings platform in the U.S. Trusted by more than 25 million consumers and 750,000 healthcare professionals annually, GoodRx provides access to savings and affordability options for generic and brand-name medications at more than 70,000 pharmacies nationwide, as well as comprehensive healthcare research and information. Since 2011, GoodRx has helped consumers save nearly $75 billion on the cost of their prescriptions.
Our goal is to help Americans find convenient and affordable healthcare. We offer solutions for consumers, employers, health plans, and anyone else who shares our desire to provide affordable prescriptions to all Americans.
GoodRx is seeking a hands-on Lead Security Production Engineer to drive security strategy, architecture, and risk mitigation across our products, infrastructure, and internal systems. This role requires deep technical expertise, strong engineering judgement, and the ability to lead through influence.
You will not only remediate vulnerabilities and respond to incidents, but also define security standards, shape engineering practices, and elevate the organization’s long-term security posture. You will lead vulnerability triage and remediation design, provide operational ownership of critical security tooling and continuously raise the bar for security maturity across the company.
As a recognized subject matter expert, you will partner closely with Engineering, Product, Infrastructure, and Leadership to design scalable, proactive security solutions that protect GoodRx and our customers.
Responsibilities:
Define and evolve the security architecture across cloud, application, and infrastructure domains.
Lead threat modeling and risk analysis for complex systems and new product initiatives.
Develop and guide implementation of secure design principles across engineering teams and DevOp teams.
Evaluate emerging security technologies and recommend strategic adoption.
Perform enterprise-level risk assessments and translate findings into prioritized remediation roadmaps.
Define and improve security policies, standards, and control frameworks.
Drive alignment of security practices with regulatory and compliance requirements.
Provide executive-ready summaries of risk posture and mitigation strategy.
Lead complex security investigations and incident response efforts.
Conduct root cause analysis and implement systemic improvements to reduce future risk.
Develop and refine runbooks, playbooks, and response automation.
Act as an escalation point for high-impact security events.
Partner with engineering teams to integrate security into the SDLC.
Define standards for secure code reviews and static/dynamic analysis.
Evaluate vulnerabilities and consider attack paths and recommend both immediate and long term mitigation solutions.
Improve automation for vulnerability scanning, detection, and remediation.
Perform and enhance security reviews of AI tooling including third party and internal MCP servers.
Guide cloud security best practices across AWS/GCP environments.
Act as a trusted advisor to engineering leadership and cross-functional partners.
Influence technical decisions that prioritizes security, while also considering scalability, and delivery speed.
Foster strong relationships with vendors, and internal and external security partners.
Mentor and guide junior security engineers and engineers outside the security team.
8+ years of cybersecurity or security engineering experience.
Deep expertise in application security, cloud security (AWS/GCP), and modern DevSecOps practices.
Prior experience with modern javascript frameworks and microservice architecture including Kubernetes and container security practices.
Demonstrated experience designing and implementing scalable security architectures.
Strong understanding of SDLC, CI/CD pipelines, and secure development practices.
Experience conducting enterprise-level risk assessments and incident investigations.
Strong analytical thinking and ability to assess ambiguous risk scenarios.
Excellent written and verbal communication skills, including ability to influence senior stakeholders.
Ability to operate independently and exercise sound judgment on high-impact security decisions.
Preferred Qualifications:
Experience working in regulated environments (HIPAA, SOC2, PCI, etc.).
Offensive security experience or strong understanding of adversarial techniques.
Development experience in any modern programming language is a plus (Python, Rust, Go, etc).
Experience with SSO platforms (Okta, SAML).
Experience with SIEM/SOC tooling and observability platforms.
CISSP or equivalent security certification.
Cloud security certifications (AWS/GCP) preferred.
Certified Kubernetes Administrator certification is preferred.
At GoodRx, pay ranges are determined based on work locations and may vary based on where the successful candidate is hired. The pay ranges below are shown as a guideline, and the successful candidate’s starting pay will be determined based on job-related skills, experience, qualifications, and other relevant business and organizational factors. These pay zones may be modified in the future. Please contact your recruiter for additional information.
San Francisco and Seattle Offices:
$180,000.00 - $288,000.00New York Office:
$165,000.00 - $264,000.00Santa Monica Office:
$150,000.00 - $240,000.00Other Office Locations:
$135,000.00 - $216,000.00GoodRx also offers additional compensation programs such as annual cash bonuses or commission, and annual equity grants for most positions as well as generous benefits. Our great benefits offerings include medical, dental, and vision insurance, 401(k) with a company match, an ESPP, unlimited vacation, 13 paid holidays, and 72 hours of sick leave. GoodRx also offers additional benefits like mental wellness and financial wellness programs, fertility benefits, generous parental leave, pet insurance, supplemental life insurance for you and your dependents, company-paid short-term and long-term disability, and more!
We’re committed to growing and empowering a more inclusive community within our company and industry. That’s why we hire and cultivate diverse teams of the best and brightest from all backgrounds, experiences, and perspectives. We believe that true innovation happens when everyone has a seat at the table and the tools, resources, and opportunities to excel.
With that said, research shows that women and other underrepresented groups apply only if they meet 100% of the criteria. GoodRx is committed to leveling the playing field, and we encourage women, people of color, those in the LGBTQ+ communities, individuals with disabilities, and Veterans to apply for positions even if they don’t necessarily check every box outlined in the job description. Please still get in touch - we’d love to connect and see if you could be good for the role!
GoodRx is committed to providing reasonable accommodations for candidates with disabilities during our recruiting process. If you need any assistance or accommodations due to a disability, please reach out to us at accommodations@goodrx.com.
We prioritize candidate safety. Please be aware that all official communication will only be sent from @goodrx.com or goodrx@myworkday.com addresses.
GoodRx is America's healthcare marketplace. The company offers the most comprehensive and accurate resource for affordable prescription medications in the U.S., gathering pricing information from thousands of pharmacies coast to coast, as well as a tele-health marketplace for online doctor visits and lab tests. Since 2011, Americans with and without health insurance have saved $60 billion using GoodRx and million consumers visit goodrx.com each month to find discounts and information related to their healthcare. GoodRx is the #1 most downloaded medical app on the iOS and Android app stores. For more information, visit www.goodrx.com.