Senior Full-Stack Engineer

Simulation 95; Menlo Park (CA); On-site; USD 190,000 - 230,000; Full time

Job summary

Simulation95 builds AI for healthcare and life sciences. We work with researchers, engineers, and domain experts to turn specialized knowledge into useful tools.

Our work emphasizes reliable evaluation, secure handling of information, and applications grounded in real workflows. Simulation95 seeks a senior individual-contributor who will build and secure full-stack applications for internal operations and customer-facing products, with a strong emphasis on cybersecurity, data protection, and

Qualifications

• Experience shipping and operating production applications across the full stack with strong Python or TypeScript backend skills and sound API, database, and asynchronous-processing design.
• Demonstrated application-security experience, including secure coding, authorization testing, data isolation, vulnerability remediation, and protection of confidential information.
• Ability to map data flows and trust boundaries, identify threats, and translate security and business requirements into testable controls.
• Hands-on experience with cloud services, IAM, secrets management, encryption, logging, and secure development workflows.
• Ability to support internal and production systems, diagnose failures and data-integrity issues, and document technical controls clearly.

Responsibilities

• Build responsive, accessible user interfaces with TypeScript and React, and connect them to secure APIs and data workflows.
• Build and operate secure APIs, databases, queues, background services, and integrations for internal company workflows and customer-facing production applications.
• Design and document data flows through ingestion, storage, processing, model services, and external integrations; preserve provenance and enforce access, sharing, retention, and deletion rules.
• Build security into code: authentication, least-privilege server-side authorization, customer isolation, input validation, secrets management, encryption, and audit trails.
• Conduct threat modeling and security-focused code reviews; add security tests, dependency scanning, and verify vulnerability fixes.
• Support SOC 2 readiness and ongoing controls: document systems, collect evidence, and resolve findings with teams and auditors.
• Own application reliability and data safety through integrity checks, monitoring, safe deployments, incident investigation, backups, and tested recovery.

Skills

Python

TypeScript

Full-stack

APIs

Security

Tools

Cloud services

IAM

Secrets management

Encryption

Job description

Simulation95 builds AI for healthcare and life sciences. We work with researchers, engineers, and domain experts to turn specialized knowledge into useful tools. Our work emphasizes reliable evaluation, secure handling of information, and applications grounded in real workflows.

About the role

You will build and secure full-stack applications supporting Simulation95's internal business operations and customer-facing products, from user interfaces through APIs, databases, and production operations. Cybersecurity will be central to your code, architecture, data flows, and production operations. You will turn security policies into working technical controls, protect sensitive data, and support SOC 2 readiness. This is a senior, hands-on individual-contributor role.

Responsibilities

• Build responsive, accessible user interfaces with TypeScript and React, and connect them to secure APIs and data workflows.
• Build and operate secure APIs, databases, queues, background services, and integrations for internal company workflows and customer-facing production applications.
• Design and document data flows through ingestion, storage, processing, model services, and external integrations; preserve provenance and enforce access, sharing, retention, and deletion rules.
• Build security into code: authentication, least-privilege server-side authorization, customer isolation, input validation, secrets management, encryption, and audit trails that protect sensitive information.
• Conduct threat modeling and security-focused code reviews; add security tests, dependency and secret scanning to delivery workflows, and verify vulnerability fixes.
• Support SOC 2 readiness and ongoing controls: implement technical safeguards, document systems, collect access and change-management evidence, and resolve findings with operations and auditors.
• Own application reliability and data safety through integrity checks, monitoring, safe deployments, incident investigation, backups, and tested recovery with infrastructure colleagues.

Qualifications

• Experience shipping and operating production applications across the full stack, with strong Python or TypeScript backend skills and sound API, database, and asynchronous-processing design.
• Demonstrated application-security experience, including secure coding, authorization testing, data isolation, vulnerability remediation, and protection of confidential information.
• Ability to map data flows and trust boundaries, identify threats, and translate security and business requirements into testable controls.
• Hands-on experience with cloud services, identity and access management, secrets, encryption, logging, and secure development and deployment workflows.
• Ability to support internal and production systems, diagnose failures and data-integrity issues, and document technical controls and decisions clearly.

Preferred experience

• Experience supporting SOC 2 readiness or examinations through technical controls, evidence collection, access reviews, change management, and remediation.
• Enterprise identity integrations, sensitive healthcare or research data, or AI systems requiring controlled access to tools, models, and datasets.