Information Security Engineer

Doctronic; New York (NY); On-site; USD 180,000 - 240,000; Full time

Benefits offered by this job

Equity Opportunities

Comprehensive Health Benefits

Flexible time off

Job summary

A healthcare technology firm based in New York seeks an experienced Information Security Engineer to manage security compliance and protect sensitive healthcare data. This role involves maintaining SOC 2 Type II compliance and ensuring HIPAA safeguards within a rapidly scaling environment. Ideal candidates will have over 7 years of hands-on information security experience, preferably in healthcare or fintech sectors. The company offers a competitive salary, equity opportunities, and comprehensive health benefits.

Qualifications

• 7+ years of information security experience in production environments.
• Healthcare or fintech background required with knowledge of security requirements.
• Ability to read code, configure systems, and investigate incidents.

Responsibilities

• Maintain SOC 2 Type II compliance and manage audits.
• Implement and monitor HIPAA safeguards.
• Conduct penetration testing and vulnerability assessments.
• Respond to security incidents and conduct post-incident analysis.
• Embed security best practices into development lifecycle.

Skills

Information security experience in production environments

Regulated industry security requirements

Hands-on technical ability

Compliance frameworks expertise (SOC 2, HIPAA)

AWS security controls and cloud security

Strong communicator

Proactive problem-solver

Collaborative partner

Education

CISSP, CISM, CISA, or equivalent certification

Job description

Information Security Engineer

Where Medicine Meets Intelligence

Doctronic is the first AI legally authorized to practice medicine. We're processing millions of consultations monthly with 99%+ treatment plan accuracy validated by board-certified clinicians.

About the Role

We're looking for an Information Security Engineer to own our security posture. We're HIPAA-compliant and SOC 2 Type II certified—you'll maintain and strengthen that foundation as we scale to serve millions of patients and enterprise partners.

This role is critical to our mission. When you're protecting healthcare data, security isn't just best practice—it's a sacred responsibility. You'll combine hands-on technical work with strategic security leadership, ensuring Doctronic remains the most trusted AI diagnostic platform in healthcare.

What You'll Do

• Maintain SOC 2 Type II compliance and manage ongoing audits with external assessors

• Implement and monitor HIPAA technical safeguards across our infrastructure and applications

• Conduct and coordinate regular penetration testing, vulnerability assessments, and security reviews

• Complete vendor security reviews and respond to enterprise security questionnaires from health systems and payers

• Implement and enforce security policies across engineering, operations, and business teams

• Respond to security incidents with urgency and thoroughness, conducting post-incident analysis

• Build security automation and monitoring to scale protection as the company grows

• Collaborate with engineering teams to embed security best practices into the development lifecycle

• Stay current on emerging threats, vulnerabilities, and regulatory requirements in healthcare technology

Who You Are

• 7+ years of information security experience in production environments

• Healthcare or fintech background required—you understand regulated industry security requirements

• Hands-on technical ability, not just policy and paperwork—you can read code, configure systems, and investigate incidents

• Deep experience with SOC 2, HIPAA, or equivalent compliance frameworks

• Familiarity with AWS security controls, IAM, encryption, and cloud security best practices

• Strong communicator who can translate security requirements for technical and non-technical audiences

• Proactive problem-solver who anticipates risks before they materialize

• Collaborative partner who enables teams to move fast while staying secure

Nice to Have

• CISSP, CISM, CISA, or equivalent security certification

• Experience with health information exchanges, TEFCA, QHIN, or interoperability standards

• Startup security experience—building security programs from scratch vs. maintaining established ones

• Familiarity with AI/ML security considerations and model protection

• Experience with mobile app security (iOS/Android)

• Knowledge of medical device security standards or FDA digital health guidance

• Background in application security, secure SDLC, or DevSecOps

Compensation & Benefits

Base Salary: $180K-$240K + Equity

New York City | On-site
Join our NYC team and work directly with engineering and product teams to build security into everything we do.

Equity Opportunities
Share in Doctronic's growth as we transform healthcare with AI.

Comprehensive Health Benefits
We offer comprehensive health, dental, and vision coverage—plus mental health support and flexible time off—because caring for others starts with caring for ourselves.

Building AI That Matters
Join Doctronic and work with cutting-edge AI that's transforming healthcare and helping people make faster, smarter decisions.

Reports To

Director of Engineering