Founding Security Engineer & Deputy CISO - Remote

Hidden Jobs; United States; Remote; USD 180,000 - 240,000; Full time

Benefits offered by this job

Remote-friendly

Edenred card

Birthday leave

Flat hierarchy

Job summary

Hidden Jobs is seeking a founding security engineer to join as Deputy CISO within a healthcare technology company. The role blends hands-on engineering with end-to-end program ownership across compliance, incident response, and customer-facing security work, in a regulated clinical setting.

The position offers broad influence and visible impact without an immediate management layer, with remote-friendly arrangements and a flat-hierarchy culture that values accountability and collaboration.

Qualifications

• Six+ years of combined software and security engineering experience.
• Direct experience as technical counterpart through ISO 27001, C5, or SOC 2 certification cycle.
• Practical vulnerability management in production environments.
• Active engagement with the security community and AI security curiosity.
• Ability to communicate in English with engineers, auditors, and healthcare teams.

Responsibilities

• Drive vulnerability management across code repositories and triage findings to closure.
• Review infrastructure decisions with the platform team and evaluate options like customer-managed keys or HSMs.
• Lead security compliance work including ISO 27001, C5, SOC 2 and MDR-related activities.
• Build customer-facing security narratives and evidence packages, including AI-assisted questionnaire handling.
• Define incident response processes, runbooks, and an on-call rotation for a non-SOC company.
• Monitor threats and translate AI and supply-chain risks into concrete actions.

Skills

Security engineering

Vulnerability management

ISO 27001

SOC 2

Auditing collaboration

AI security

English communication

Tools

Scanner tooling

Dependency tooling

Incident response tooling

Job description

Hidden Jobs is seeking a founding security engineer to join as Deputy CISO within a healthcare technology company. The role blends hands-on engineering with end-to-end program ownership across compliance, incident response, and customer-facing security work, in a regulated clinical setting.

The position offers broad influence and visible impact without an immediate management layer, with remote-friendly arrangements and a flat-hierarchy culture that values accountability and collaboration.