Senior Security Engineer, Pair Team

• This role is ideal for someone who enjoys building—an engineer who wants to write code, automate workflows, strengthen infrastructure, and help shape security at a company using AI to improve healthcare access for underserved communities
• 2+ years of Security Engineering experience, with significant depth in either application security or infrastructure/cloud security and working proficiency in the other
• Strong AWS and cloud security expertise, including IAM, identity management (SSO, SAML, SCIM), network security, secrets management, and cloud-native security tooling
• Hands-on software engineering experience with the ability to read, review, and ship production code in Ruby and/or TypeScript. Python experience is a plus
• Experience implementing technical controls in regulated environments such as HIPAA, SOC 2, HITRUST, PCI, or similar compliance frameworks
• Demonstrated fluency with AI and LLM-powered tools, including practical experience incorporating them into day-to-day engineering workflows
• Strong understanding of AI security concepts, including prompt injection, AI agent guardrails, data governance, PHI handling, and AI vendor risk
• Builder mindset with a bias toward execution, ownership, and practical problem-solving
• Ownership mindset – own driving results for the mission, business, and customer experience
• Strong collaboration skills with thought partners from engineering, product, and legal
• Strong desire to work in an early stage startup environment that is fast paced, complex, and has minimal barriers to make decisions (no “red tape”)
• Passion for helping individuals experiencing complex chronic needs such as homelessness, severe mental illness, and substance use disorder

Desirable

• As a HIPAA-regulated, AI-native company, security is foundational to our ability to serve patients. As our platform, AI capabilities, and regulatory footprint continue to grow, we're looking for our first dedicated Security Engineer to help scale our security posture alongside the business
• This is a highly hands-on engineering role. You'll own the implementation of security controls across applications, cloud infrastructure, AI systems, and compliance-driven initiatives
• You'll help secure patient-facing voice agents, LLM-powered workflows, internal developer tooling, and a growing ecosystem of vendors and integrations. You'll partner closely with Engineering and IT to remediate findings, improve our security foundations, and build systems that enable the company to move quickly and safely
• This is a fully remote position reporting up to the IT Lead
• Own vulnerability management, dependency security, threat modeling, security code reviews, and remediation of penetration test findings
• Strengthen our AWS security posture, identity and access management (IAM, SSO, SAML, SCIM), endpoint security, threat detection, and incident response capabilities
• Design and implement security controls for AI-powered products and workflows, including protections against prompt injection, data leakage, and other AI-specific risks
• Build technical safeguards that enable the secure use of PHI and sensitive data within LLM-powered systems
• Implement and maintain the technical controls, evidence, and security practices required to support HIPAA, SOC 2, and other compliance programs
• Leverage AI-powered tooling, automation, and modern security platforms to scale security impact across the organization
• Build self-service security solutions, paved roads, and runbooks that help engineers move quickly while maintaining strong security standards
• Partner closely with Engineering and IT to deliver pragmatic, scalable security solutions that support product velocity and business growth
• Be a force multiplier for the Pod-Infra team

• Please be aware that while we sincerely appreciate your interest, due to the high volume of requests, we're unable to respond to general position inquiries via email. To apply for a position with us, please submit your application for the role you are interested in. Our team regularly reviews applications and will reach out to candidates whose qualifications align with our current openings listed below. Thank you!