Senior Security Engineer

**The Role:**

• As the first dedicated Senior Security Engineer, you will own the technical security of a fully remote, SaaS- and cloud-native healthcare platform.
• You'll partner with Product & Engineering to integrate security into development workflows, from AI agent code review to cloud infrastructure.
• This role includes building security architecture for an agentic SDLC, non-human identity management, and supporting HIPAA and SOC 2 readiness.

**What You'll Do:**

• Own application and product security: threat modeling, secure design review, and secure code review focusing on critical access-control flaws.
• Design and manage security for the AI-native development cycle, including phase-gate criteria and clawback procedures for risk spikes.
• Secure AWS environment with IAM, network segmentation, encryption, and workload protection across S3, EKS, and Terraform.
• Run security reviews of AI and third-party vendors handling PHI, and stand up detection and response leveraging AI for anomaly detection.

**Who You Are:**

• Experienced security engineer with 6+ years in application and cloud security (AWS), preferably in regulated environments like healthcare or fintech.
• Proficient with secure SDLC tooling (SAST/DAST, GitHub Advanced Security) and identity management (Okta, OAuth/OIDC).
• Driven to secure AI/LLM systems, comfortable as the sole security specialist, and skilled in communicating tradeoffs across teams.