About the OpportunityAs a HIPAA-regulated, AI-native company, security is foundational to our ability to serve patients. As our platform, AI capabilities, and regulatory footprint continue to grow, we're looking for our first dedicated Security Engineer to help scale our security posture alongside the business.
This is a highly hands-on engineering role. You'll own the implementation of security controls across applications, cloud infrastructure, AI systems, and compliance-driven initiatives. You'll help secure patient-facing voice agents, LLM-powered workflows, internal developer tooling, and a growing ecosystem of vendors and integrations. You'll partner closely with Engineering and IT to remediate findings, improve our security foundations, and build systems that enable the company to move quickly and safely.
This role is ideal for someone who enjoys building-an engineer who wants to write code, automate workflows, strengthen infrastructure, and help shape security at a company using AI to improve healthcare access for underserved communities.
This is a fully remote position reporting up to the IT Lead.
What You'll Do- Own vulnerability management, dependency security, threat modeling, security code reviews, and remediation of penetration test findings.
- Strengthen our AWS security posture, identity and access management (IAM, SSO, SAML, SCIM), endpoint security, threat detection, and incident response capabilities.
- Design and implement security controls for AI-powered products and workflows, including protections against prompt injection, data leakage, and other AI-specific risks.
- Build technical safeguards that enable the secure use of PHI and sensitive data within LLM-powered systems.
- Implement and maintain the technical controls, evidence, and security practices required to support HIPAA, SOC 2, and other compliance programs.
- Leverage AI-powered tooling, automation, and modern security platforms to scale security impact across the organization.
- Build self-service security solutions, paved roads, and runbooks that help engineers move quickly while maintaining strong security standards.
- Partner closely with Engineering and IT to deliver pragmatic, scalable security solutions that support product velocity and business growth.
- Be a force multiplier for the Pod-Infra team
What You'll Need - 2+ years of Security Engineering experience, with significant depth in either application security or infrastructure/cloud security and working proficiency in the other
- Strong AWS and cloud security expertise, including IAM, identity management (SSO, SAML, SCIM), network security, secrets management, and cloud-native security tooling
- Hands-on software engineering experience with the ability to read, review, and ship production code in Python and/or TypeScript. Ruby experience is a plus
- Experience implementing technical controls in regulated environments such as HIPAA, SOC 2, HITRUST, PCI, or similar compliance frameworks
- Demonstrated fluency with AI and LLM-powered tools, including practical experience incorporating them into day-to-day engineering workflows
- Strong understanding of AI security concepts, including prompt injection, AI agent guardrails, data governance, PHI handling, and AI vendor risk
- Builder mindset with a bias toward execution, ownership, and practical problem-solving.
- Ownership mindset - own driving results for the mission, business, and customer experience
- Strong collaboration skills with thought partners from engineering, product, and legal
- Strong desire to work in an early stage startup environment that is fast paced, complex, and has minimal barriers to make decisions (no "red tape")
- Passion for helping individuals experiencing complex chronic needs such as homelessness, severe mental illness, and substance use disorder
Bonus Points for the following:
- A consulting or advisory background
- Experience as an early security hire at a startup, particularly as the first or early security engineer
- Experience securing consumer-facing or patient-facing AI products and applications
- Contributions to open-source security projects, security tooling, and/or published security research
- CISSP, OSCP, AWS Security Specialty, or similar certifications
Our Values- Lead with integrity: We keep our commitments and take responsibility for our actions. We are dependable and choose authenticity over perfection.
- Embrace challenges: We leave our egos at the door and step forward into discomfort instead of back into safety. We help each other to learn and provide feedback using candor and kindness.
- Break through walls: We go the extra mile for our patients, partners and one another, and we run toward hard things. We are resilient in our push for consistent improvement and challenge the status quo.
- Act beyond yourself: We build each other up and respect boundaries. We seek first to understand and assume positive intent.
- Care comes first: We hold ourselves to the highest standards for our patients. We are relentless in the pursuit of our mission, and ensure that we are taking care of ourselves in order to care for others.
Because We Value You- Competitive salary: $170,000 - $190,000 (depending on experience)
- Equity compensation package
- Flexible vacation policy - take the time you need to recharge
- Comprehensive medical, dental, and vision coverage
- 401(k)
- 100% company-sponsored short and long-term disability and life insurance
- Subsidized backup childcare and caregiver supports through Wellthy
- Work entirely from the comfort of your own home
- Monthly $100 work from home expense stipend
- We provide the equipment needed for the role
- Opportunity for rapid career progression with plenty of room for personal growth!
