Senior Backend Engineer - Secure APIs for Healthcare AI

Simulation 95; Menlo Park (CA); On-site; USD 180,000 - 240,000; Full time

Job summary

Simulation95 builds AI for healthcare and life sciences, seeking a senior backend security engineer. You will craft secure backend systems, APIs, and data flows, embedding strong security into code and operations. The role focuses on privacy, access controls, and reliability in production environments.

You will turn security policies into robust technical controls, support SOC 2 readiness, and collaborate with researchers, engineers, and domain experts to secure data and workflows.

Qualifications

• Shipping and operating production backend systems with Python or TypeScript.
• Experience in application security, including secure coding and data isolation.
• Ability to map data flows and translate security needs into controls.
• Hands-on with cloud services, IAM, secrets, encryption, and logging.

Responsibilities

• Build and operate secure APIs, databases, queues, and background services.
• Document data flows; enforce access, retention, and deletion rules.
• Integrate authentication, least-privilege authorization, and isolation.
• Conduct threat modeling and security-focused code reviews; add tests.
• Support SOC 2 readiness; provide evidence and remediation with auditors.
• Ensure backend reliability, monitoring, backups, and safe deployments.

Skills

Python

TypeScript

Backend design

Threat modeling

Security tests

Vulnerability remediation

Tools

Cloud services

IAM

Secrets management

Encryption

Logging

Vulnerability scanning

Job description

Simulation95 builds AI for healthcare and life sciences, seeking a senior backend security engineer. You will craft secure backend systems, APIs, and data flows, embedding strong security into code and operations. The role focuses on privacy, access controls, and reliability in production environments.

You will turn security policies into robust technical controls, support SOC 2 readiness, and collaborate with researchers, engineers, and domain experts to secure data and workflows.