Senior Security Engineer

Own the security posture: HIPAA, BAA program, SOC 2 Type II, penetration testing, vulnerability management, secure SDLC. What you'll do Ship the platform surface - dashboards, models, integrations - that the four audiences of modern healthcare (patients, providers, researchers, pharma) use every day. Hold a five-stage validation bar: cohort definition, held-out evaluation, subgroup analysis, independent review, continuous monitoring. Operate inside a HIPAA-aware stack: BAA-covered LLM providers, customer-controlled tenancies, immutable audit log on every inference. Work in a small, senior team. No layers, no bureaucracy. Direct access to clinical, security, and engineering leads. What we're looking for 5+ years of relevant, senior-level experience in security & compliance. Strong evidence-led decision-making: you publish what you claim, you disclose subgroup performance, you read the methodology. Comfortable working in a BAA-covered, HIPAA-aware environment. Security is part of the build, not bolted on. Excellent written and verbal communication. You'll be in front of customers, clinicians, and regulators. What we offer Remote-first within the US. Boston HQ for those who want it. Generous equity. Every full-time hire gets meaningful equity. $200K - $260K + equity, health/dental/vision, 401(k), unlimited PTO (3-week minimum), parental leave. Quarterly on sites for planning and team building. #J-18808-Ljbffr Automate AI, LLC