Lead Security Engineer
Hinge Health4 months ago
Base Salary
$239k - $263k/yr
Responsibilities
- Audit the AWS cloud security posture and IAM architecture and build relationships with Application Security, SRE, and R&D Engineering stakeholders.
- Assess Claude Code, Cursor, and MCP gateway tooling for security risks and develop a governance framework.
- Design and implement AI-driven security monitoring, threat detection, incident response, and IAM governance tools and workflows.
- Develop policies and protocols for secure AI tools and platforms, including agent sandboxing and MCP server governance.
- Deliver automated, granular IAM controls enforcing least privilege, including AI-assisted privilege escalation and approval workflows.
- Own the security strategy for AI-enabled development and cloud infrastructure and serve as the primary security engineering subject matter expert.
- Ensure HIPAA, privacy, and relevant security framework requirements are met for services, AI tooling, and infrastructure.
- Drive initiatives involving incident response, threat intelligence, vulnerability management, and monitoring.
- Mentor team members, lead knowledge-sharing sessions, and author technical proposals with measurable security objectives.
Requirements
- Bachelor’s degree in a technical, engineering, or scientific field, or comparable education/experience.
- At least 7 years of cybersecurity experience, including 3 or more years focused on security operations or IAM.
- At least 5 years of AWS-focused cloud security operations experience.
- At least 3 years of coding experience with Python, Go, or TypeScript, including hands-on Terraform and infrastructure-as-code development.
- Hands-on experience securing AI/ML systems, including data pipelines, model deployments, and API integrations.
- AWS Solutions Architect or Security Specialty certification is preferred.
- AI/ML security certifications or familiarity with adversarial machine learning threats and mitigations are preferred.
- Experience integrating security controls into CI/CD pipelines and AI-assisted development workflows is preferred.
- Experience managing an enterprise identity provider, especially Okta, with deep OAuth 2.0 and SAML knowledge is preferred.
- SOC 2, PCI, or HIPAA audit or training certifications and knowledge of low-level networking principles are preferred.
Benefits
- Comprehensive medical, dental, and vision coverage, including gender-affirming care, family and fertility planning tools, and travel reimbursements for unavailable healthcare.
- Traditional or Roth 401(k) options with a 2% company match.
- Modern life stipends for learning and development.
About Hinge Health
Hinge Health is focused on scaling and automating the delivery of health care, starting with musculoskeletal conditions. Leveraging an AI-powered care model, a wearable device, and access to expert clinicians, Hinge Health delivers personalized, evidence-based care that helps people move beyond pain, improving member outcomes and experiences and reducing costs for clients. The company is headquartered in San Francisco, California. We’re hiring! Join us at hingehealth.com/careers