Security Engineer, Infrastructure

About Attune

Attune is a Chicago-based healthcare voice AI company building an intelligent platform that automates patient engagement at scale. Our agentic voice AI conducts health risk assessments, schedules appointments, manages prescription reminders, and handles post-procedure follow-ups.

We help healthcare organizations improve patient outcomes while reducing operational burden - transforming how providers connect with their patients.

About the Role

Attune runs a healthcare voice AI platform on AWS that processes protected health information for health plans, providers and labs. The platform runs across multiple AWS accounts on EKS, with EC2 hosts for telephony and supporting services, Lambda functions and a large library of container images. Keeping all of it current on a predictable cadence is the core of this role.

This is a hands-on engineering role combining infrastructure operations, security and software engineering. You will build and run automation that patches and upgrades our AWS infrastructure on a predictable cadence, drive vulnerability findings to closure, and produce evidence for our HITRUST assessor and customers. You will work directly with the Platform and Engineering teams and report to the Chief Security Officer.

This role offers opportunities to deepen your experience in cloud security, infrastructure automation and modern deployment tools within a healthcare voice AI environment. You will contribute hands-on engineering experience while learning from colleagues across Security, Platform and Engineering.

What You'll Do

• Own the patch and upgrade lifecycle for production infrastructure: EKS control plane versions, node group machine images, EC2 operating systems, Lambda runtimes and container base images.

• Run node image releases on a monthly cadence across every cluster, automated with managed node groups, Karpenter, Terraform, Argo CD and GitHub Actions.

• Plan and execute EKS version upgrades across production, staging and shared-services clusters in collaboration with the Platform Team, including add-on compatibility, deprecation checks and rollback plans.

• Triage and remediate findings from image scanning, cloud posture scanning and penetration tests on a published schedule.

• Keep every running workload on a current, scanned image.

• Partner with Platform and Engineering to harden the platform through backup and recovery configuration, least-privilege IAM for workloads, network segmentation, and secrets handling.

• Maintain the infrastructure as code so that every change ships through a reviewed pull request and leaves an evidence trail.

• Produce the patching and vulnerability evidence the security team uses for HITRUST, customer audits and the quarterly management review: scan trends, image release dates, exception records.

• Take part in the on-call rotation for security-relevant infrastructure incidents and in the twice-yearly disaster recovery exercise.

• Own software patching in GitHub as well as infrastructure: keep Dependabot, SonarCloud and the Trivy image gate healthy across the organization's repositories, clear the dependency and code-quality findings they raise, and make sure the fix reaches production, not just the pull request.

• Write code when the fix lives in the application. Our Agentic Voice platform uses Java and Python services with a TypeScript front end on Kubernetes. You will submit dependency updates, library replacements or configuration changes, build and test your changes, and work with application engineers through review and deployment.

Must-Haves

• Three or more years running production infrastructure on AWS, including at least one year operating Kubernetes (EKS preferred).

• Hands-on Terraform, including modules and state management; multi-account experience is a plus.

• Strong Linux administration and scripting in Python or Bash; comfortable reading application code when a finding lands in it.

• Experience with CI/CD pipelines (GitHub Actions preferred) and GitOps deployment (Argo CD or equivalent).

• Experience working a vulnerability backlog to closure and automating the repetitive parts.

• Working knowledge of container image scanning (Trivy, Inspector or similar) and cloud posture scanning (Prowler or similar).

• Clear written communication. You will explain what you changed and why to engineers, auditors and leadership.

• Located in the United States and authorized to work here. Customer contracts prohibit offshore access to the environments this role manages.

• Working experience with GitHub at the organization level: Actions, Dependabot, branch rulesets, and SonarCloud or an equivalent code-quality and security scanner.

• Enough software engineering to patch a real codebase: you can read and change Java, Python or TypeScript, build and test it, and ship it through a pull request.

Nice-to-Haves

• AWS Solutions Architect or DevOps Engineer certification, or CKA.

• Experience in a HIPAA, HITRUST or SOC 2 environment and with evidence collection for audits.

• HashiCorp Vault, Karpenter, or AWS Backup with cross-account vaults.

• Telephony or real-time voice infrastructure on AWS.

Compensation & Benefits

Annual base salary range: $120,000–$140,000. Actual base salary will depend on relevant experience, skills and qualifications. Comprehensive health benefits, flexible PTO and a 401(k).

Our Values

Lead With Empathy

Attune designs technology that listens first and responds with compassion and precision. Every interaction reflects genuine understanding and care for patients, providers, and partners.

Trust Is Earned

Trust is built through openness, clarity, and reliability. Attune upholds the highest standards of privacy, security, and communication, ensuring confidence in every exchange.

Work in Harmony

Collaboration drives progress. Attune aligns patients, care organizations, and technology partners to create seamless, unified systems that work together toward better outcomes.

Prioritize Outcomes

Success is measured by impact, not activity. Attune focuses on closing care gaps, improving experiences, and advancing meaningful health outcomes.

Innovate With Integrity

Attune advances AI responsibly, creating solutions that amplify human expertise without losing the human touch. Innovation always serves people first.

Expand Access

Care should be easy to reach and equitable for all. Attune's technology removes barriers, expands access, and ensures every patient can connect with care when it matters most.

Attune is an Equal Employment Opportunity Employer and all employment decisions shall be made without regard to age, race, creed, color, religion, sex, national origin, ancestry, disability status, veteran status, sexual orientation, gender identity or expression, genetic information, marital status, citizenship status or any other basis as protected by federal, state, or local law.

We are committed to the full inclusion of all qualified individuals. As part of this commitment, we will ensure that persons with disabilities are provided reasonable accommodations. If reasonable accommodation is needed to participate in the job application or interview process, perform essential job functions, and/or receive other benefits and privileges of employment, please contact us.