3 months ago
Responsibilities
- Own cloud and infrastructure security across AWS and GCP, including guardrails, identity and network architecture, secrets management, and secure-by-default primitives.
- Build security into product architecture and development workflows through design reviews, code review, authentication and authorization hardening, and reusable tooling.
- Establish detection, logging, audit trails, and incident response for systems handling protected health information.
- Secure the corporate and identity surface, including SSO, device and endpoint security, SaaS hardening, and employee lifecycle access.
- Design isolation and data-flow controls for agentic AI systems to defend against sensitive-data leakage across model pipelines and tool use.
- Build security automation and security-as-code supporting SOC 2, HIPAA, and HITRUST controls.
- Partner with Legal, Compliance, and GTM to translate regulatory and customer requirements into practical controls.
Requirements
- 7+ years of experience in security engineering with a strong software engineering foundation.
- Deep hands-on cloud security experience across AWS and/or GCP, including infrastructure as code and building security foundations.
- Breadth across infrastructure, application, identity, and detection and response suitable for serving as the first security engineer.
- Experience protecting sensitive data at scale; PHI, HIPAA, or similarly regulated data experience is preferred.
- Experience designing security controls for LLMs, AI agents, and related data flows.
- Demonstrated ability to move quickly, find shortcuts, and deliver against demanding goals.
Benefits
- Fully covered medical, vision, and dental insurance.
- Memberships for One Medical, Talkspace, Teladoc, and Kindbody.
- Unlimited paid time off and 16 weeks of parental leave.
- 401(k) plan, FSA option, commuter benefits, and DashPass.
- Lunch at the office every day and dinner at the office after 6:30 pm.
- Meaningful equity for full-time employees.
- Fully in-person work in New York, with the team based in a SoHo office.
Tech Stack
Categories
About Forus
Forus builds an AI-powered healthcare network and software that connects physicians, pharmacies, insurers, and biopharma to speed therapies to patients. It sells enterprise platforms and data services that coordinate prescribing, benefits, and clinical workflows across stakeholders. Privately held and based in New York, the company is backed by Thrive Capital, General Catalyst, and Accel.