Senior Security Engineer at AIOS — Remote, $150k–$250k/yr inc equity

Role overview

Own hands-on security engineering across identity, employee devices, endpoint detection, and security monitoring for a distributed organization handling patient data. You’ll build controls and automated responses, partner with engineering on cloud security, and lead day-to-day security operations as an individual contributor.

Responsibilities

- Run identity and access controls, including single sign-on, account provisioning, multi-factor authentication, and conditional or device-aware access. - Manage employee devices through enrollment, encryption, patching, configuration standards, and remote lock or wipe. - Operate endpoint detection and response, investigating incidents from initial alert through containment. - Decide what security events to collect, write and tune detections, and automate responses to recurring threats. - Work with engineering on cloud identity, access, and logging across cloud environments. - Own onboarding and offboarding security tasks, coordinate outside IT providers, and respond to security and IT escalations.

Requirements

- Six or more years in security engineering, with hands-on experience across identity, endpoints, and detection. - Practical experience operating an identity provider, device management platform, and endpoint detection and response tools. - A record of writing detections and explaining how they identify malicious activity while limiting noisy alerts. - Knowledge of attacker techniques, gained through work such as penetration testing, red teaming, bug bounties, or security competitions. - Ability to automate work with scripts such as Python or Bash and use AI agents to handle repeatable tasks. - Enough cloud security experience to partner with engineers on identity, logging, and access. - Clear communication with employees, engineers, and executives, and experience managing IT operations and vendors for a distributed team.

Nice to have

Experience in healthcare or another regulated environment, including familiarity with requirements such as HIPAA, GDPR, or PCI, is useful.

Benefits and work setup

This is a fully remote role with mostly asynchronous work and flexibility to choose a time zone, provided you can be available through midday Pacific Time for calls when needed. Listed compensation is $150,000–$250,000 per year including equity. Benefits include healthcare where applicable, paid time off plus local holidays, annual development and wellness budgets, coaching, and work equipment.