Cloud and AI Security Engineer, Suki
$150-200k
Ambient clinical intelligence for documentation, revenue cycle & reasoning
Be an early applicant
Ambient clinical intelligence for documentation, revenue cycle & reasoning
201-500 employees
Be an early applicant
$150-200k
201-500 employees
Company mission
To help clinicians focus on what matters most: their patients.
Role
Who you are
- 7+ years in Information Security, with 1+ years evaluating and remediating AI risk
- Hands-on experience securing AWS, GCP, or Azure environments using automated tools and native security services
- Strong coding skills for developing secure tooling, automation, including leveraging agentic AI
- Deep understanding of healthcare compliance standards and security protocols, including HIPAA / HITECH, HITRUST CSF, and NIST including a foundational understanding of NIST AI RMF in a cloud environment (GCP preferred)
- Demonstrated leadership ability with experience managing security projects and mentoring junior team members
- Excellent communication and collaboration skills to lead technical discussions
What the job involves
- As a Cloud & AI Security Engineer, you will serve as the primary technical architect and hands-on leader securing our enterprise cloud infrastructure, high-throughput network boundaries, and cutting-edge AI/ML product capabilities
- In a high-growth healthcare SaaS environment handling sensitive Protected Health Information (PHI), security is both a core technical requirement and a business driver. You will bridge the gap between traditional cloud/network security and emerging AI risk management, collaborating directly with our 100+ members of the engineering and data science teams to build secure, scalable systems that earn the trust of major healthcare systems
- Project Leadership: Manage large security projects, proactively enhance system defenses, and ensure compliance with regulations like HIPAA and the HITRUST r2 CSF
- Automation & Development: Develop robust and secure code for security tooling, automation, and critical integrations to improve our security posture. Drive adoption and integration of Suki’s paved path security solutions across all business units
- Collaboration: Partner with cross-departmental leaders in Suki to reduce the friction, increase speed-to-market and deliver secure-by-design products
- AI/ML Security & Risk Assessment: Conduct security assessments and red-teaming on proprietary and third-party AI/ML models, LLMs, and data pipelines (testing for prompt injection, data poisoning, training data extraction, and model inversion)
- PHI & Data Privacy Governance: Implement guardrails to prevent PHI exposure in model training, vector databases, RAG architectures, and fine-tuning datasets
- Cloud Posture & Architecture: Own the technical security architecture across our multi-cloud footprint (AWS / GCP / Azure), ensuring zero-trust principles and robust Cloud Security Posture Management (CSPM)
- Container & IaC Security: Secure Kubernetes clusters, container registries, and Infrastructure-as-Code (Terraform / CloudFormation) within CI/CD deployment pipelines
- Identity & Access Management (IAM): Design and enforce least-privilege IAM policies, role-based access controls (RBAC), just-in-time (JIT) provisioning, and secrets management across cloud environments
- Zero Trust & Network Segmentation: Design and enforce microsegmentation, VPC architecture, SASE/VPN solutions, and strict network isolation for multi-tenant health data architectures
- Egress/Ingress Monitoring: Manage network security controls, intrusion detection/prevention systems (IDS/IPS), and Web Application Firewalls (WAF) to prevent unauthorized data exfiltration
- Network Security Mastery: Proven track record in cloud network design, VPC routing, cloud firewalls, Zero Trust Network Access (ZTNA), and egress control
Our take
Medical practitioners spent a heap of time on administration, reducing the time they have to administer care or make clinical decisions. Suki aims to solve this problem by delivering an ambient clinical intelligence system that captures patient conversations and generates high-quality notes to assist with documentation, billing and decision-making.
Suki integrates with major EHR systems, transforming the conversations it records into information that is used to automatically populate forms and paperwork. This massively reduces time spent notetaking, empowering practitioners to increase the time spent with patients by around 12%. On top of this, Suki can also translate this information into structured, billable information - and leverage accredited data to assist with diagnosis and care pathway decisions.
This complete approach to reducing the administrative burden on healthcare practitioners has earned the company much praise and attention. It has raised considerable funding that it has used to expand its customer base through partnerships with health systems and medical groups, as well as investing in enhancing its offering through regular product updates and upgrades.
Kirsty
Company Specialist at Welcome to the Jungle
Insights
21% employee growth in 12 months
Company
Funding (last 2 of 4 rounds)
Oct 2024
$70m
SERIES D
Dec 2021
$55m
SERIES C
Total funding: $165m
Company benefits
- Full healthcare benefits, including medical, vision, and dental
- Unlimited vacation
- Team building activities
- Free lunch and snacks, so that there is ample fuel for thought
- A team of warm, humble, high-performance entrepreneurs
Company HQ
Staumbaugh Heller, Redwood City, CA
Leadership
Punit Singh Soni
(Founder & CEO)Punit worked for Google as their Lead Product Manager for Google+ Games and Mobile. They then went onto work for Motorola in Product Management before co-founding Suki.
Share this job
View 5 more jobs at Suki