Senior Security Engineer — AI Healthcare Platform

Openkrill; United States; Remote; USD 180,000 - 240,000; Full time

Job summary

Hipp is seeking a Senior Security Engineer to lead and strengthen security across Hipp’s product, cloud infrastructure, software-development lifecycle, and internal operations. You will be a hands-on technical leader responsible for identifying risk, designing pragmatic controls, improving detection and response, and helping engineering teams ship secure systems quickly.

You will work closely with engineering, IT, product, compliance, and company leadership to evolve Hipp’s security posture as

Qualifications

• Experience securing production SaaS, cloud, or data-intensive apps.
• Knowledge of identity, network security, encryption, and secrets management.
• Experience with threat modeling, vulnerability management, security testing, monitoring, or incident response.
• Ability to review architecture and code and propose mitigations.
• Collaborative work with engineering to implement controls without slowing product development.

Responsibilities

• Own and evolve Hipp’s product and infrastructure security program.
• Partner with engineering teams to embed security into system design, implementation, deployment, and operations.
• Conduct architecture reviews, threat modeling, code reviews, and targeted security assessments.
• Strengthen cloud security across IAM, network controls, secrets, encryption, logging, and workload configuration.
• Build and improve vulnerability-management processes across applications, dependencies, containers, infrastructure, and endpoints.
• Develop security monitoring, alerting, investigation, and incident-response capabilities.
• Lead incident-response preparation, including playbooks, tabletop exercises, evidence collection, and post-incident improvement.
• Improve authentication, authorization, tenant isolation, privileged-access, and least-privilege controls.
• Partner with engineering to secure AI-agent tools, model integrations, retrieval systems, and access to sensitive data.
• Assess AI-specific threats such as prompt injection, excessive agency, insecure tool use, sensitive-data disclosure, and untrusted retrieved content.
• Support HIPAA and SOC 2 compliance through technically sound, sustainable controls and evidence.
• Help respond to customer security reviews, questionnaires, and technical diligence.
• Evaluate vendors and integrations for security and privacy risk.
• Establish security standards, documentation, and engineering guidance that teams can apply without unnecessary friction.
• Track security posture and risk through meaningful metrics.
• Mentor engineers and build a strong security culture across the company.

Skills

SaaS security

Cloud security

Threat modeling

Incident response

Vulnerability management

Access control

Architecture review

Security monitoring

Secure development

Communication

Tools

AWS

GCP

Azure

Job description

Hipp is seeking a Senior Security Engineer to lead and strengthen security across Hipp’s product, cloud infrastructure, software-development lifecycle, and internal operations. You will be a hands-on technical leader responsible for identifying risk, designing pragmatic controls, improving detection and response, and helping engineering teams ship secure systems quickly.

You will work closely with engineering, IT, product, compliance, and company leadership to evolve Hipp’s security posture as