2 months ago
Responsibilities
- Own cloud and infrastructure security across AWS and GCP, including guardrails, identity and network architecture, secrets management, and secure-by-default primitives.
- Build security into product architecture and development workflows through design reviews, code review, authentication and authorization hardening, and reusable tooling.
- Establish detection, logging, audit trails, and incident response for systems handling protected health information.
- Secure the corporate and identity surface, including SSO, device and endpoint security, SaaS hardening, and employee lifecycle access.
- Design isolation and data-flow controls for agentic AI systems to defend against sensitive-data leakage across model pipelines and tool use.
- Build security automation and security-as-code supporting SOC 2, HIPAA, and HITRUST controls.
- Partner with Legal, Compliance, and GTM to translate regulatory and customer requirements into practical controls.
Requirements
- 7+ years of experience in security engineering with a strong software engineering foundation.
- Deep hands-on cloud security experience across AWS and/or GCP, including infrastructure as code and building security foundations.
- Breadth across infrastructure, application, identity, and detection and response suitable for serving as the first security engineer.
- Experience protecting sensitive data at scale; PHI, HIPAA, or similarly regulated data experience is preferred.
- Experience designing security controls for LLMs, AI agents, and related data flows.
- Demonstrated ability to move quickly, find shortcuts, and deliver against demanding goals.
Benefits
- Fully covered medical, vision, and dental insurance.
- Memberships for One Medical, Talkspace, Teladoc, and Kindbody.
- Unlimited paid time off and 16 weeks of parental leave.
- 401(k) plan, FSA option, commuter benefits, and DashPass.
- Lunch at the office every day and dinner at the office after 6:30 pm.
- Meaningful equity for full-time employees.
- Fully in-person work in New York, with the team based in a SoHo office.
Tech Stack
Categories
