Lead Security Engineer (First Hire) - Remote

Spruce Health, Inc.; San Francisco (CA); Remote; USD 250,000 - 360,000; Full time

Job summary

Spruce Health, Inc. is seeking the first dedicated security engineer to own security across our Go-based backend, TypeScript/React web apps, and AWS infrastructure. You’ll shape security strategy, policies, and tooling for a fully remote engineering team.

You will lead end-to-end security initiatives, drive risk-based prioritization, and collaborate with stakeholders on vendor security, incident response, and regulatory compliance in a healthcare-focused environment.

Qualifications

• 8+ years in security engineering at a distributed software company (ideally in healthcare or regulated environments).
• Broad experience across application, cloud (AWS), and corporate security, with depth in at least one area.

Responsibilities

• Build and own Spruce's security roadmap across every entry point.
• Secure AI across Spruce, from tools and agents to features shipped.

Skills

Security engineering

Distributed software

Go

TypeScript

Red teaming

Penetration testing

LLM/AI risk assessment

Medical/regulated security

Tools

AWS

Terraform

GraphQL

Go

TypeScript

Job description

Spruce Health, Inc. is seeking the first dedicated security engineer to own security across our Go-based backend, TypeScript/React web apps, and AWS infrastructure. You’ll shape security strategy, policies, and tooling for a fully remote engineering team.

You will lead end-to-end security initiatives, drive risk-based prioritization, and collaborate with stakeholders on vendor security, incident response, and regulatory compliance in a healthcare-focused environment.