Senior Backend Engineer

Simulation 95; Menlo Park (CA); On-site; USD 180,000 - 240,000; Full time

Job summary

Simulation95 builds AI for healthcare and life sciences, seeking a senior backend security engineer. You will craft secure backend systems, APIs, and data flows, embedding strong security into code and operations. The role focuses on privacy, access controls, and reliability in production environments.

You will turn security policies into robust technical controls, support SOC 2 readiness, and collaborate with researchers, engineers, and domain experts to secure data and workflows.

Qualifications

• Shipping and operating production backend systems with Python or TypeScript.
• Experience in application security, including secure coding and data isolation.
• Ability to map data flows and translate security needs into controls.
• Hands-on with cloud services, IAM, secrets, encryption, and logging.

Responsibilities

• Build and operate secure APIs, databases, queues, and background services.
• Document data flows; enforce access, retention, and deletion rules.
• Integrate authentication, least-privilege authorization, and isolation.
• Conduct threat modeling and security-focused code reviews; add tests.
• Support SOC 2 readiness; provide evidence and remediation with auditors.
• Ensure backend reliability, monitoring, backups, and safe deployments.

Skills

Python

TypeScript

Backend design

Threat modeling

Security tests

Vulnerability remediation

Tools

Cloud services

IAM

Secrets management

Encryption

Logging

Vulnerability scanning

Job description

Simulation95 builds AI for healthcare and life sciences. We work with researchers, engineers, and domain experts to turn specialized knowledge into useful tools. Our work emphasizes reliable evaluation, secure handling of information, and applications grounded in real workflows.

About the role

You will build and secure the backend systems supporting Simulation95's internal business operations and customer-facing products. Cybersecurity will be central to your code, architecture, data flows, and production operations. You will turn security policies into working technical controls, protect sensitive data, and support SOC 2 readiness. This is a senior, hands-on individual-contributor role.

Responsibilities

• Build and operate secure APIs, databases, queues, background services, and integrations for internal company workflows and customer-facing production applications.
• Design and document data flows through ingestion, storage, processing, model services, and external integrations; preserve provenance and enforce access, sharing, retention, and deletion rules.
• Build security into code: authentication, least-privilege server-side authorization, customer isolation, input validation, secrets management, encryption, and audit trails that protect sensitive information.
• Conduct threat modeling and security-focused code reviews; add security tests, dependency and secret scanning to delivery workflows, and verify vulnerability fixes.
• Support SOC 2 readiness and ongoing controls: implement technical safeguards, document systems, collect access and change-management evidence, and resolve findings with operations and auditors.
• Own backend reliability and data safety through integrity checks, monitoring, safe deployments, incident investigation, backups, and tested recovery with infrastructure colleagues.

Qualifications

• Experience shipping and operating production backend systems, with strong Python or TypeScript skills and sound API, database, and asynchronous-processing design.
• Demonstrated application-security experience, including secure coding, authorization testing, data isolation, vulnerability remediation, and protection of confidential information.
• Ability to map data flows and trust boundaries, identify threats, and translate security and business requirements into testable controls.
• Hands-on experience with cloud services, identity and access management, secrets, encryption, logging, and secure development and deployment workflows.
• Ability to support internal and production systems, diagnose failures and data-integrity issues, and document technical controls and decisions clearly.

Preferred experience

• Experience supporting SOC 2 readiness or examinations through technical controls, evidence collection, access reviews, change management, and remediation.
• Enterprise identity integrations, sensitive healthcare or research data, or AI systems requiring controlled access to tools, models, and datasets.