Key Responsibilities:

• Design, implement, and maintain security controls across our cloud infrastructure (AWS) supporting a HIPAA-regulated, SOC 2 audited environment
• Lead and/or support threat modeling, security design reviews, and secure code review for new features and architecture
• Own vulnerability management: identify, triage, and drive remediation of vulnerabilities across cloud and application layers
• Build and maintain logging, monitoring, and alerting (SIEM) to support detection and incident response
• Develop and maintain incident response playbooks; participate in and lead incident response when needed
• Partner with Engineering to embed security into CI/CD pipelines and infrastructure-as-code (Terraform or similar)
• Manage identity and access controls, including least-privilege IAM, SSO/MFA enforcement, and access reviews
• Support compliance initiatives and audits (SOC 2 Type II, HITRUST, HIPAA risk assessments) and own evidence collection and control documentation for your areas
• Evaluate and implement security tooling (CSPM, EDR/XDR, vulnerability scanning) as the environment scales
• Mentor engineers on secure development practices and act as a security point of contact for product and engineering teams

Key Requirements

• 7+ years of experience in security engineering, infrastructure security, or a closely related role
• Hands-on experience securing cloud environments (AWS preferred; Azure/GCP a plus)
• Experience supporting compliance frameworks such as HIPAA, SOC 2, ISO 27000 series or similar in a regulated environment
• Proficiency with infrastructure-as-code (Terraform or similar) and scripting/automation (Python, Bash, or similar)
• Experience with vulnerability management, SIEM/logging platforms, and incident response
• Working knowledge of identity and access management, Zero Trust principles, and secure network architecture
• Strong communication skills — able to explain risk and trade-offs clearly to both engineers and non-technical stakeholders
• Prior experience in healthcare, health IT, or another highly regulated industry is a plus
• Computer Science or similar degree is a plus
• Relevant certifications (CISSP, CCSP, OSCP, or similar) are a plus but not required

Benefits:

• Stock Options
• Flexible PTO
• Medical, dental, vision insurance
• Life insurance
• Maternity and Paternity Leave
• 401K matching
• Apple equipment
• Sponsorship for conferences, continuing education, etc
• Dynamic engineering role–technological innovation is at the core of our business
• Growth and learning opportunities from a startup environment include working closely with an international team of scientists, engineers, platform architects, programmers and professionals
• Do something morally benevolent!

The annual US base salary range for this full-time position is $145,000 - $185,000 + equity + benefits. Pay scale is flexible depending on experience. Within the range, individual pay is determined by work location and additional factors, including job-related skills, competencies, experience, relevant education and training. Your recruiter can share more about the specific salary range for your preferred location during the hiring process.