Senior Security Architect – AI & PHI Risk Lead

agelessrx; United States; On-site; USD 150,000 - 190,000; Full time

Job summary

AgelessRx is seeking a Senior Security Engineer to own information security across our healthcare-focused telehealth platform. You will drive risk-based security programs covering cloud, identity, application security, and vulnerability management while partnering with Engineering to embed security into the development lifecycle.

You will shape our AI governance approach, assess AI vendor risk, and translate regulatory requirements into practical controls for PHI handling.

Qualifications

• 5+ years of experience in security engineering, cybersecurity, or a related technical security role.
• Hands-on depth across at least two major security domains (application/product security, cloud/identity security, vulnerability management, security operations, or security governance).
• Experience securing environments subject to HIPAA or comparable regulatory requirements and translating obligations into technical controls.
• Strong knowledge of one major cloud provider and IAM practices (SSO, MFA, SAML/OIDC).
• Experience with application-security tooling (SAST, SCA, dependency mgmt) and secure software development.

Responsibilities

• Own and evolve the security roadmap with risk-based prioritization.
• Implement repeatable security programs, controls, reporting, and documentation.
• Conduct security reviews for systems, vendors, and changes; maintain audit-ready evidence.
• Lead IAM, cloud, and infrastructure security; manage vulnerability programs.
• Embed security in the SDLC and develop threat models for products with PHI in mind.
• Oversee AI governance security requirements and risk assessments.

Skills

Security engineering

HIPAA security

Cloud security

IAM

Application security

Vulnerability management

Threat modeling

Security operations

Regulatory compliance

AI governance

Tools

SAST

SCA

DAA

Job description

AgelessRx is seeking a Senior Security Engineer to own information security across our healthcare-focused telehealth platform. You will drive risk-based security programs covering cloud, identity, application security, and vulnerability management while partnering with Engineering to embed security into the development lifecycle.

You will shape our AI governance approach, assess AI vendor risk, and translate regulatory requirements into practical controls for PHI handling.