Senior Security Engineer
Skills
TypescriptAI SecurityAWS SecurityHITRUSTHealthcarePythonSOC 2
What the job involves
The main requirements, responsibilities and hiring steps.
Requirements
- 2+ years of security engineering experience with depth in application security or infrastructure/cloud security and working proficiency in the other
- Strong AWS and cloud security expertise including IAM identity management SSO SAML SCIM network security secrets management and cloud-native security tooling
- Hands-on software engineering experience with ability to read review and ship production code in Python and/or TypeScript
- Experience implementing technical controls in regulated environments such as HIPAA SOC 2 HITRUST PCI or similar frameworks
- Fluency with AI and LLM-powered tools and practical experience using them in engineering workflows
- Strong understanding of AI security concepts including prompt injection AI agent guardrails data governance PHI handling and AI vendor risk
- Builder mindset with a bias toward execution ownership and practical problem-solving
- Strong collaboration skills with engineering product and legal
- Strong desire to work in an early stage startup environment
Nice to have
- Consulting background
- Early security hire experience
- Consumer-facing AI security
- Open-source contributions
- Published security research
- CISSP
- OSCP
- AWS Security Specialty
Day to day
- Own security engineering work across applications cloud infrastructure and AI systems
- Implement and automate security controls for patient-facing products internal tooling and vendor integrations
- Partner with Engineering and IT to remediate findings improve defenses and support compliance programs
Hiring process
- Submit application
- Team reviews applications
- Selected candidates are contacted