Lead Security Engineer

500M+ downloads. 80M+ monthly users. A decade of building – and we’re still accelerating.

Flo is the world’s #1 health & fitness app worldwide on a mission to build a better future for female health. Backed by a $200M investment led by General Atlantic, we became the first product of our kind to reach a $1B valuation in 2024 – and we’re not slowing down. With 7M paid subscribers and the highest-rated experience in the App Store’s health category, we’ve spent 10 years earning trust at scale.

Now, we’re building the next generation of digital health – AI-powered, privacy-first, clinically backed – to help our users know their body better. The job

You’ll help Flo build a trusted, secure, audit-ready platform for the millions of people who use our women’s health app. You’ll support our SOC 2 Type II and ISO 27001 programs and help implement HIPAA safeguards, all within Flo’s integrated Information Security and Privacy Management System (ISPMS). This is a hands-on role.

It needs strong applied security architecture skills, especially secure design reviews and technical control validation across AWS (EKS, Lambda, RDS, S3, VPC, IAM, KMS). You’ll work with our professional services partners, auditors, the Security team, and the Privacy, Product and Platform Engineering teams. Together you’ll design controls that reduce friction, so the business can move fast and stay secure.

What you’ll do Support SOC 2 and ISO 27001 certifications and HIPAA safeguard implementation, a