Remote Senior Security Engineer — SOC 2 & AI Risk

AxisCare; Waco (TX); Remote; USD 140,000 - 190,000; Full time

Benefits offered by this job

Remote work

Full medical insurance

Laptop provided

Job summary

AxisCare is hiring a Senior Security Engineer to own security and compliance across our SaaS platform, a fully remote role reporting to Engineering leadership. You will drive SOC 2 Type II compliance efforts, lead us toward HITRUST, and harden our AWS, Docker, and PHP/React stack while addressing AI-related security risks.

You will collaborate with product engineering teams, implement guardrails for secure software development, and protect sensitive data from healthcare-related information.

Qualifications

• 5+ years in application security, infrastructure security, or security engineering at a SaaS company.
• Hands-on experience with AWS security (IAM, VPC, Security Groups, KMS, CloudTrail, GuardDuty).
• Experience owning or heavily contributing to the engineering side of SOC 2 Type II compliance.
• Familiarity with container security (Docker, Kubernetes) and infrastructure-as-code (Terraform).
• Solid grasp of web application security fundamentals (OWASP Top 10, secure SDLC).
• Experience securing AI/ML systems or LLM-powered products.
• Concrete examples of how you've used AI to improve your own security work: automating compliance tasks, speeding up threat analysis, building detection rules faster, or something we haven't thought of.
• Able to work remotely from the Eastern, Central, or Mountain time zones
• Qualified to work in the United States or Canada

Responsibilities

• Own AxisCare Engineering's security program as an individual contributor, continually improving security standards as threats evolve.
• Own engineering's share of SOC 2 Type II compliance: control design, evidence collection, audit prep, and gap remediation.
• Chart the path toward HITRUST certification, mapping what we already have and building what we don't.
• Threat-model our application and infrastructure across PHP/React on AWS, Terraform, Docker, and MySQL; raise security bar as the architecture evolves.
• Own and improve our security scanning program; tune findings and drive remediation with developers.
• Assess and mitigate security risks in AI products: prompt injection, data leakage, model output filtering, and abuse scenarios.
• Strengthen detection and response: logging, alerting, incident playbooks, penetration tests, and remediation actions.
• Keep security policies clear, current, and concise; train developers on secure practices.

Skills

Application security

Security engineering

Infrastructure security

AWS security

Terraform / IaC

Container security

Docker

Kubernetes

AI security

Security policy writing

Technical communication

Remote work awareness

Tools

Docker

Kubernetes

Terraform

AWS IAM

AWS VPC

KMS

CloudTrail

GuardDuty

Job description

AxisCare is hiring a Senior Security Engineer to own security and compliance across our SaaS platform, a fully remote role reporting to Engineering leadership. You will drive SOC 2 Type II compliance efforts, lead us toward HITRUST, and harden our AWS, Docker, and PHP/React stack while addressing AI-related security risks.

You will collaborate with product engineering teams, implement guardrails for secure software development, and protect sensitive data from healthcare-related information.