Senior Security Engineer

Role overview Lead hands-on security work across a healthcare technology platform’s applications, cloud infrastructure, software delivery, and internal systems. The role combines security architecture and risk prioritization with implementation, incident readiness, and close partnership with engineering, product, IT, and compliance teams.

Responsibilities - Set and improve product and infrastructure security practices, embedding them into system design, development, deployment, and operations. - Review architecture and code, model threats, and conduct focused security assessments. - Strengthen cloud controls for identity and access, networks, secrets, encryption, logging, and workloads. - Improve vulnerability management across applications, dependencies, containers, infrastructure, and endpoints. - Build monitoring and incident response capabilities, including playbooks, exercises, investigations, and follow-up improvements. - Secure authentication, authorization, tenant separation, privileged access, and AI-related integrations; support compliance and customer security reviews.

Requirements - Broad practical experience across application and cloud security, security architecture, and incident response. - Ability to identify and prioritize risks, then implement workable controls alongside engineering teams. - Strong written and verbal communication with technical and non-technical partners. - Sound judgment in a fast-moving environment and the ownership to build security processes from an early stage.

Nice to have - Experience with healthcare systems or protected health information, and familiarity with HIPAA, SOC 2, HITRUST, NIST, or similar frameworks. - Background in infrastructure as code, container and CI/CD security, supply-chain controls, penetration testing, or bug bounty programs. - Knowledge of AI-agent security, multi-tenant SaaS, endpoint security, device management, or single sign-on. - Security certifications or experience as an early security hire.