Senior Security Engineer

About the role

Own the security posture: HIPAA, BAA program, SOC 2 Type II, penetration testing, vulnerability management, secure SDLC.

What you'll do

• Ship the platform surface — dashboards, models, integrations — that the four audiences of modern healthcare (patients, providers, researchers, pharma) use every day.
• Hold a five-stage validation bar: cohort definition, held-out evaluation, subgroup analysis, independent review, continuous monitoring.
• Operate inside a HIPAA-aware stack: BAA-covered LLM providers, customer-controlled tenancies, immutable audit log on every inference.
• Work in a small, senior team. No layers, no bureaucracy. Direct access to clinical, security, and engineering leads.

What we're looking for

• 5+ years of relevant, senior-level experience in security & compliance.
• Strong evidence-led decision-making: you publish what you claim, you disclose subgroup performance, you read the methodology.
• Comfortable working in a BAA-covered, HIPAA-aware environment. Security is part of the build, not bolted on.
• Excellent written and verbal communication. You'll be in front of customers, clinicians, and regulators.

What we offer

• Remote-first within the US. Boston HQ for those who want it.
• Generous equity. Every full-time hire gets meaningful equity.
• $200K – $260K + equity, health/dental/vision, 401(k), unlimited PTO (3-week minimum), parental leave.
• Quarterly on-sites for planning and team building.