Senior Security Engineer

Job not on LinkedIn

🔥 16 minutes ago

🇺🇸 United States – Remote

⏰ Full Time

🟠 Senior

👮‍♂️ Cybersecurity / Security Engineer

👻 Ghost score 15%

What it means: the chance that no one is really hiring for this job.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Hipp Health

WebsiteLinkedInAll Job Openings

2 - 10 employees

Founded 2024

🏥 Healthcare

☁️ SaaS

🤖 Artificial Intelligence

💰 $6.2M Seed Round on 2025-10

Healthcare • SaaS • Artificial Intelligence

Hipp Health is an AI-native clinical operations platform for ambulatory therapy practices (starting with Applied Behavior Analysis and expanding into Speech and Occupational Therapy). The platform provides end-to-end workflows including intake (SMS, portal, referral capture), scheduling, clinical care (session notes, treatment plans, clinical decision support), billing and revenue cycle management (claims, denials, payer calls), and compliance/HIPAA security. Hipp automates administrative tasks with agents and AI features to reduce denials, speed payments, streamline scheduling, and improve documentation quality, targeting therapy practices and clinics.

📋 Description

• Own and evolve Hipp’s product and infrastructure security program • Partner with engineering teams to embed security into system design, implementation, deployment, and operations • Conduct architecture reviews, threat modeling, code reviews, and targeted security assessments • Strengthen cloud security across identity and access management, network controls, secrets, encryption, logging, and workload configuration • Build and improve vulnerability-management processes across applications, dependencies, containers, infrastructure, and endpoints • Develop security monitoring, alerting, investigation, and incident-response capabilities • Lead incident-response preparation, including playbooks, tabletop exercises, evidence collection, and post-incident improvement • Improve authentication, authorization, tenant isolation, privileged-access, and least-privilege controls • Partner with engineering to secure AI-agent tools, model integrations, retrieval systems, and access to sensitive data • Assess AI-specific threats such as prompt injection, excessive agency, insecure tool use, sensitive-data disclosure, and untrusted retrieved content • Support HIPAA and SOC 2 compliance through technically sound, sustainable controls and evidence • Help respond to customer security reviews, questionnaires, and technical diligence • Evaluate vendors and integrations for security and privacy risk • Establish security standards, documentation, and engineering guidance • Track security posture and risk through meaningful metrics • Mentor engineers and build a strong security culture across the company

🎯 Requirements

• Significant experience securing production SaaS, cloud, or data-intensive applications • Strong knowledge of application security, cloud security, identity, network security, encryption, secrets management, and secure software development • Experience with at least one major cloud platform such as AWS, GCP, or Azure • Experience identifying and remediating common web, API, authentication, and authorization vulnerabilities • Hands-on experience with threat modeling, vulnerability management, security testing, monitoring, or incident response • Ability to review architecture and code, reason about realistic attack paths, and recommend practical mitigations • Experience working with engineering teams to implement security controls without unnecessarily slowing product development • Strong understanding of logging, detection, investigation, and response • Sound judgment when prioritizing security risks in a fast-moving environment • Clear written and verbal communication with both technical and non-technical audiences • High ownership and comfort building systems and processes from an early stage • Experience securing healthcare technology or systems handling protected health information is nice to have • Familiarity with HIPAA, SOC 2, HITRUST, NIST, or similar frameworks is nice to have • Experience with infrastructure as code, container security, CI/CD security, and software-supply-chain controls is nice to have • Experience with penetration testing, bug bounty programs, or adversarial security reviews is nice to have • Familiarity with modern AI and agent security risks is nice to have • Experience securing multi-tenant SaaS architectures is nice to have • Experience with endpoint security, device management, SSO, and internal corporate security is nice to have • Relevant security certifications are welcome but not required • Experience as an early security hire at a startup is nice to have • Must be able to work in the United States; application asks whether employer-sponsored work authorization will be required

🏖️ Benefits

• Own security at a company where trust directly affects healthcare providers and patients • Shape security architecture and practices while the platform and team are still growing • Work closely with engineers, founders, product leaders, and customers • Address emerging security challenges created by AI-native healthcare workflows • Build durable systems rather than perform compliance theater • Have direct influence over Hipp’s product, infrastructure, and security culture

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume