Senior Security Engineer

Job Summary

As the first dedicated Senior Security Engineer in a fully remote position, the successful candidate will own the technical security of a cloud-native healthcare platform, focusing on application security, secure design reviews, and the integration of security into AI workflows.

Key responsibilities

• Own application and product security, including threat modeling and secure code reviews, particularly for healthcare applications and APIs
• Design and implement security architecture for AI-driven software development lifecycle and manage non-human identity and secrets at scale
• Conduct security reviews of AI and third-party vendor integrations, ensuring compliance with HIPAA and SOC 2 standards

Required qualifications

• 6+ years of experience in security engineering, with a focus on application/product security and cloud security (AWS)
• Hands-on experience with secure SDLC tooling, including SAST/DAST and GitHub Advanced Security
• Strong knowledge of identity and access management tools such as Okta and OAuth/OIDC
• Familiarity with the HIPAA Security Rule, SOC 2, and NIST Cybersecurity Framework
• Bachelor's degree in Computer Science or equivalent practical experience