Lead Security Engineer
Hinge Health5 months ago
Base Salary
$239k - $263k/yr
Responsibilities
- Audit the AWS cloud security posture and IAM architecture and build relationships with Application Security, SRE, and R&D Engineering stakeholders.
- Assess Claude Code, Cursor, and MCP gateway tooling for security risks and develop a governance framework.
- Design and implement AI-driven security monitoring, threat detection, incident response, and IAM governance tools and workflows.
- Develop policies and protocols for secure AI tools and platforms, including agent sandboxing and MCP server governance.
- Deliver automated, granular IAM controls enforcing least privilege, including AI-assisted privilege escalation and approval workflows.
- Own the security strategy for AI-enabled development and cloud infrastructure and serve as the primary security engineering subject matter expert.
- Ensure HIPAA, privacy, and relevant security framework requirements are met for services, AI tooling, and infrastructure.
- Drive initiatives involving incident response, threat intelligence, vulnerability management, and monitoring.
- Mentor team members, lead knowledge-sharing sessions, and author technical proposals with measurable security objectives.
Requirements
- Bachelor’s degree in a technical, engineering, or scientific field, or comparable education/experience.
- At least 7 years of cybersecurity experience, including 3 or more years focused on security operations or IAM.
- At least 5 years of AWS-focused cloud security operations experience.
- At least 3 years of coding experience with Python, Go, or TypeScript, including hands-on Terraform and infrastructure-as-code development.
- Hands-on experience securing AI/ML systems, including data pipelines, model deployments, and API integrations.
- AWS Solutions Architect or Security Specialty certification is preferred.
- AI/ML security certifications or familiarity with adversarial machine learning threats and mitigations are preferred.
- Experience integrating security controls into CI/CD pipelines and AI-assisted development workflows is preferred.
- Experience managing an enterprise identity provider, especially Okta, with deep OAuth 2.0 and SAML knowledge is preferred.
- SOC 2, PCI, or HIPAA audit or training certifications and knowledge of low-level networking principles are preferred.
Benefits
- Comprehensive medical, dental, and vision coverage, including gender-affirming care, family and fertility planning tools, and travel reimbursements for unavailable healthcare.
- Traditional or Roth 401(k) options with a 2% company match.
- Modern life stipends for learning and development.
Tech Stack
Categories
About Hinge Health
Hinge Health builds a digital musculoskeletal care platform for employers and health plans, combining a mobile app, connected sensors, AI, and clinicians to deliver personalized rehab and pain management. It sells as an employee benefit and integrates with health plans and PBMs; the program spans acute injury, chronic pain, and post-surgical recovery. Founded in 2014 and headquartered in San Francisco, it serves 2,550+ employers and 50+ health plans, reaching over 20 million eligible members.