Security Architect: AI‑Powered, Cloud‑Secure Health Tech

Flo Health; United States; Hybrid; USD 99,000 - 124,000; Full time

Benefits offered by this job

Hybrid work model

Competitive salary

Annual reviews

Performance incentive program

Paid holidays

Sick leave

Female health leave

Job summary

Flo Health is seeking a hands-on Security Architect to shape secure architectures and build guardrails for human and AI-agent development. You will lead threat modelling, design reviews, and embed security into the SDLC and CI/CD, translating risk into pragmatic business decisions.

With 7+ years in security engineering, you'll work closely with engineering, product and leadership to define secure patterns, patterns, and guardrails while supporting ISO 27001/27701 compliance and secure

Qualifications

• 7+ years in security engineering, application/product security or security architecture, including hands-on work securing cloud-native systems
• Deep knowledge of Secure SDLC: threat modelling, security testing, app security review and CI/CD security
• Hands-on experience with AWS and Cloudflare (or equivalents) and Terraform or similar IaC
• A strong grasp of the OWASP Top 10 and the ability to assess exploitability and impact
• Solid coding skills (e.g. Python, Go, Scala) and experience building security tooling or automation
• Practical understanding of the risks in AI-assisted and agentic development and LLM applications (e.g. OWASP Top 10 for LLMs)
• Experience with security risk analysis and risk management methods
• The ability to explain trade-offs clearly to engineers and senior stakeholders, and to win people over

Responsibilities

• Shape secure architecture from day one. Partner with teams early in design, lead security design reviews for new services and major changes, and record key decisions and risk trade-offs
• Build security harnesses for human and AI-agent development. Design guardrails, sandboxing, least-privilege access for agents and tools, secrets handling, policy-as-code and automated checks that run inside developer and agent workflows
• Lead on AI and agentic security. Define secure patterns for LLM integrations, MCP servers and tool use, and tackle risks like prompt injection, data leakage, excessive agency and supply-chain compromise
• Create paved roads. Publish reusable patterns, reference architectures and standards that teams adopt because they’re the easiest option
• Scale threat modelling. Build tools and skills that let engineers run threat models themselves, and carry out internal security assessments
• Remove whole classes of vulnerabilities. Automate vulnerability triage and investigation, find systemic root causes, and feed the fixes back into patterns and guardrails
• Turn risk into clear decisions. Explain security risk in pragmatic terms so the business can prioritise based on risk and value
• Advise and enable. Be a trusted partner to engineering, product and leadership, coach engineers, and help evaluate third-party and AI tools so they can be adopted securely. Support ISO 27001/27701 so that controls are built into how we engineer, not bolted on afterwards.

Skills

Security engineering

Secure SDLC

Threat modelling

Cloud security

AWS

CI/CD security

Programming (Python/Go/Scala)

AI security

Risk analysis

Stakeholder communication

Tools

Terraform

Cloudflare

Job description

Flo Health is seeking a hands-on Security Architect to shape secure architectures and build guardrails for human and AI-agent development. You will lead threat modelling, design reviews, and embed security into the SDLC and CI/CD, translating risk into pragmatic business decisions.

With 7+ years in security engineering, you'll work closely with engineering, product and leadership to define secure patterns, patterns, and guardrails while supporting ISO 27001/27701 compliance and secure