Staff Security Engineer, Prealize Health

• You're energized by the opportunity to be both a strategic leader and a hands-on builder
• You are deeply motivated by protecting sensitive healthcare data and building trust in AI-powered solutions
• You enjoy the fast-paced, startup-like environment where your impact is visible and immediate
• You believe that compliance and security can be streamlined with elegant automation and tooling
• Bachelor’s degree in Computer Science, Information Security, or a related field
• 7+ years of experience in information security, with at least 3 years in a technical leadership role
• Proven experience in healthcare IT security, including HIPAA and other regulatory frameworks
• Strong programming skills for building and maintaining automation scripts and tools
• Hands-on experience with AWS security services (e.g., IAM, GuardDuty, Security Hub, CloudTrail)
• Experience drafting and enforcing IT security policies and procedures
• Strong communication skills for interacting with executives, auditors, vendors, customers, and technical teams
• Applicants must be U.S. citizens or U.S. permanent residents

Desirable

• We are seeking a Staff Security Engineer to lead our information security program, blending strategic leadership with hands-on automation and cloud infrastructure work
• You will be instrumental in shaping our security posture from the ground up, ensuring compliance and scalability as we grow
• Provide leadership and oversight of Prealize Health’s information security and compliance program
• Maintain and advance our compliance with HITRUST and other healthcare regulatory requirements
• Write, update, and promote security policies, procedures, and standards
• Prepare for and lead internal/external audits, including HITRUST certification cycles
• Manage and optimize security controls in AWS and Vanta, leveraging automation wherever possible
• Assist in responding to customer security questionnaires and RFPs
• Perform Vendor Security and compliance evaluations
• Perform Security Risk Assessments
• Develop and maintain automation scripts and tools to streamline compliance evidence gathering, monitoring, and reporting
• Creation and deployment of IT solutions concerning security and compliance
• Lead the selection, implementation, and optimization of security tools and services
• Partner with engineering teams to embed security into our infrastructure and product development lifecycle
• Advise leadership on emerging security threats, risks, priorities, and investment opportunities
• Create and deploy Security training modules for employee education
• Assist with managing security related budget items
• Collaborate across engineering, IT, and business teams to embed a security-first mindset into everything we do