Own the security posture: HIPAA, BAA program, SOC 2 Type II, penetration testing, vulnerability management, secure SDLC.
What you'll do
- Ship the platform surface - dashboards, models, integrations - that the four audiences of modern healthcare (patients, providers, researchers, pharma) use every day.
- Hold a five-stage validation bar: cohort definition, held-out evaluation, subgroup analysis, independent review, continuous monitoring.
- Operate inside a HIPAA-aware stack: BAA-covered LLM providers, customer-controlled tenancies, immutable audit log on every inference.
- Work in a small, senior team. No layers, no bureaucracy. Direct access to clinical, security, and engineering leads.
What we're looking for
- 5+ years of relevant, senior-level experience in security & compliance.
- Strong evidence-led decision-making: you publish what you claim, you disclose subgroup performance, you read the methodology.
- Comfortable working in a BAA-covered, HIPAA-aware environment. Security is part of the build, not bolted on.
- Excellent written and verbal communication. You'll be in front of customers, clinicians, and regulators.
What we offer
- Remote-first within the US. Boston HQ for those who want it.
- Generous equity. Every full-time hire gets meaningful equity.
- $200K - $260K + equity, health/dental/vision, 401(k), unlimited PTO (3-week minimum), parental leave.
- Quarterly on sites for planning and team building.
Senior Security Engineer in northern at Unknown Company
This position is listed as full time and able to be worked remotely.