Security Lead, AI Health Tech & HIPAA

Trellis AI; San Francisco (CA); On-site; USD 180,000 - 240,000; Full time

Benefits offered by this job

Comprehensive medical, dental, and视ion

Equity

Flexible PTO

Daily meals in the office

Job summary

Trellis AI is hiring a Security Lead to own security end-to-end, protecting data in healthcare workflows while enabling rapid delivery. You will set strategy, build controls, test them as an attacker would, and engage with customers on security questions and audits.

This hands-on role reports to the Co-founder & CTO and drives cloud, identity, and endpoint security across our fast-moving startup environment.

Qualifications

• Experience owning security at a startup or high-growth company.
• Deep experience with AWS security, IAM, and cloud infrastructure.
• Hands-on offensive security: pentesting, red teaming, or bug bounty.
• Experience running vulnerability management and incident response programs.
• Leading SOC 2 and HIPAA compliance efforts and customer security reviews.

Responsibilities

• Own security end to end: roadmap across cloud, application, endpoint, and data security.
• Balance security with speed: build guardrails to allow fast shipping.
• Run offensive security: pen tests, red-team, and fix findings.
• Lock down cloud and identity: manage AWS posture, IAM, secrets, and least privilege.
• Manage vulnerabilities with scanning, triage, patching and SLAs.
• Be the voice of security to customers: answer questionnaires and audits.

Skills

Security engineering

AWS security

Offensive security

Vulnerability management

SOC 2 compliance

HIPAA compliance

Identity & access management

Windows/AD familiarity

Clear communication

Autonomous startup mindset

Tools

AWS

Windows Server

Active Directory

Job description

Trellis AI is hiring a Security Lead to own security end-to-end, protecting data in healthcare workflows while enabling rapid delivery. You will set strategy, build controls, test them as an attacker would, and engage with customers on security questions and audits.

This hands-on role reports to the Co-founder & CTO and drives cloud, identity, and endpoint security across our fast-moving startup environment.