Lead Security Engineer, Hinge Health

• The ideal candidate should be passionate about security and eager to drive change, embrace challenges and take healthcare security to new heights
• Bachelor’s degree in technical/engineering/scientific area or comparable education/experience
• 7+ years in cybersecurity, with 3+ years focused on security operations or IAM
• 5+ years of experience in cloud security operations, specifically AWS
• 3+ years of coding experience
• Hands-on experience securing AI/ML systems, including data pipelines, model deployments, API integrations and their security challenges
• Expert knowledge of enterprise IT infrastructure technology, systems, vulnerability and incident management processes
• Experience developing Terraform and updating existing infrastructure as code to conform with security standards

Desirable

• We are seeking an outstanding Lead Security Engineer with a specialized focus on AI to innovate and safeguard Hinge Health’s digital ecosystem against emerging threats.You’ll be at the forefront of a rapidly evolving landscape, leading initiatives that redefine how AI supports security operations while ensuring robust data protection.
• This is your chance to make a profound impact on millions of lives by driving advancements in the healthcare industry, ensuring utmost security, compliance and privacy
• As a Lead Security Engineer you will be at the forefront of architecting and implementing secure, scalable and cutting-edge solutions on AWS. Your role will be responsible for securing Hinge Health’s digital assets against potential threats while still maintaining seamless accessibility for authorized users.
• You love the thrill of exploring new technologies and ensuring they meet the highest security standards and are passionate about the intersection of security and Artificial Intelligence. Your expertise in healthcare, compliance and agile methodologies, will lead the implementation of top-notch AI security best practices to shape the future of a secure and scalable Cloud environment.
• AI Enablement for Security Operations: Design, implement, and optimize AI-driven tools to enhance security monitoring, threat detection, incident response, and IAM tasks
• Secure AI Implementation: Develop and enforce policies and protocols to protect AI tools and platforms from misuse, data breaches, and external threats. Stay abreast of industry trends and changing threat landscape and review technologies and services and make recommendations to continuously improve our capabilities
• Provide solutions to complex security problems with new services - Design and deliver security solutions for new services by evaluating potential risks, stakeholder needs, and available tooling as well as custom solutions
• Security, Compliance and Regulations - Meet all compliance regulations including HIPAA, privacy and other relevant security frameworks. Ensure that new services introduced into our environment adhere to all relevant compliance obligations. Take a proactive approach to mitigate potential risks
• Cyber Security Operations - Develop and drive cybersecurity initiatives related to incident response, threat intelligence, vulnerability management, monitoring and reporting tools – to continuously improve and expand capabilities
• Identity and Access Management - Design and implement IAM solutions - enabling secure and granular access controls for users and applications, enforcing least privilege principles, and utilizing automation and AI for privilege escalation, approvals, and overall developer experience
• Security Governance, Auditing and Assessment - Collaborate with internal and external auditors to ensure continuous compliance with security standards. Work closely with engineering, IT, and compliance teams to align security measures with organizational goals and industry standards