The Staff Security Engineer will be responsible for designing, implementing, and maintaining security services that support our business. You will understand data and automation are important ingredients to our mission and know how to actively employ these ingredients at scale. Beyond the technical expertise, we value individuals who can partner cross-functionally across various teams, driving impactful outcomes and further securing our digital landscape.
Primary Duties
Lead the development, implementation, and ongoing maintenance of comprehensive security strategies and solutions.
Design and deploy advanced security controls to safeguards networks, systems, and applications.
Work across disciplines to shape our security services strategy and execution
Mentor and galvanize new engineers to do their best work
Set and uphold the standard for security processes to support high-quality engineering
Minimum Qualifications
BS/BTech (or higher) in Computer Science, Information Technology, Cybersecurity or a related field, 10 years security domain experience without degree
8+ years of experience in software or security engineering within Cloud Native environments
Preferred KSA’s
Experience architecting, developing, and deploying large-scale distributed systems at scale
Experience with cloud technologies, e.g., AWS, Azure, GCP
Experience building continuous integration and continuous development (CI/CD) pipelines
Strong familiarity with server-side web technologies (eg: Java, Python, Scala, C#, C++, Go)
4+ years of experience acting as a trusted technical decision-maker in a team setting, solving for short-term and long-term business value
Experience with health-tech systems, like Electronic Health Records, Clinical data, etc.
Domain Specific Experience
AppSec and AI/ML Security
Lead AI/ML Security program for building SaaS systems using AI models including Gemni, Claude, LightLLM, and AWS Bedrock.
Design and implement robust security controls for AI/ML systems, covering model training, inference, and data pipelines.
Proactively identify and mitigate diverse threats, including model inversion, data poisoning, adversarial attacks, and prompt injection.
Collaborate seamlessly with data scientists, ML engineers, and DevOps teams to embed security throughout the entire AI/ML lifecycle.
Conduct thorough threat modeling and risk assessments for AI systems and algorithms.
Develop and implement methods to monitor AI systems for anomalous behavior and potential misuse.
Secure APIs and endpoints critical for model access and inference.
Physical Requirements
Sitting for prolonged periods of time. Extensive use of computers and keyboard. Occasional walking and lifting may be required.