Senior Security Engineer

Automate AI, LLC; Northern (KY); Hybrid; USD 200,000 - 260,000; Full time

Benefits offered by this job

Equity

Health/dental/vision

401(k)

Unlimited PTO

Parental leave

Job summary

Automate AI, LLC is seeking a senior security and compliance leader to own HIPAA, BAA programs, SOC 2 Type II, penetration testing, vulnerability management, and secure SDLC.

You will work remotely in a small, senior team with direct access to clinical, security, and engineering leads, shaping security across the platform used by patients, providers, researchers, and pharma.

Qualifications

• 5+ years of senior-level experience in security & compliance.
• Strong evidence-led decision-making: publish claims, disclose subgroup performance, read methodology.
• Comfortable in a BAA-covered, HIPAA-aware environment; security is part of the build.
• Excellent written and verbal communication, able to present to customers, clinicians, regulators.

Responsibilities

• Ship the platform surface—dashboards, models, integrations—for healthcare audiences.
• Hold a five-stage validation bar: cohort definition, held-out evaluation, subgroup analysis, independent review, continuous monitoring.
• Operate inside a HIPAA-aware stack with BAA-covered LLM providers, customer-controlled tenancies, immutable audit logs.
• Work in a small, senior team with direct access to clinical, security, and engineering leads.

Skills

Security & compliance

Evidence-led decision-making

HIPAA knowledge

Communication

Job description

Own the security posture: HIPAA, BAA program, SOC 2 Type II, penetration testing, vulnerability management, secure SDLC.

What you'll do

• Ship the platform surface - dashboards, models, integrations - that the four audiences of modern healthcare (patients, providers, researchers, pharma) use every day.
• Hold a five-stage validation bar: cohort definition, held-out evaluation, subgroup analysis, independent review, continuous monitoring.
• Operate inside a HIPAA-aware stack: BAA-covered LLM providers, customer-controlled tenancies, immutable audit log on every inference.
• Work in a small, senior team. No layers, no bureaucracy. Direct access to clinical, security, and engineering leads.

What we're looking for

• 5+ years of relevant, senior-level experience in security & compliance.
• Strong evidence-led decision-making: you publish what you claim, you disclose subgroup performance, you read the methodology.
• Comfortable working in a BAA-covered, HIPAA-aware environment. Security is part of the build, not bolted on.
• Excellent written and verbal communication. You'll be in front of customers, clinicians, and regulators.

What we offer

• Remote-first within the US. Boston HQ for those who want it.
• Generous equity. Every full-time hire gets meaningful equity.
• $200K - $260K + equity, health/dental/vision, 401(k), unlimited PTO (3-week minimum), parental leave.
• Quarterly on sites for planning and team building.