Senior Security Engineer — HIPAA, SOC 2, GCP & AI Security

Sage Care Inc; Palo Alto (CA); On-site; USD 180,000 - 230,000; Full time

Job summary

Sage Care Inc is hiring its first dedicated Security Engineer to own security and compliance across the platform, applications, identity, and SaaS footprint. You’ll influence engineering guidelines, implement critical controls, and be the technical voice for customer security teams.

You’ll report to the Head of Core Platform, Infrastructure and Security, serving as Sage’s Security Officer and HIPAA Lead. This role spans SOC 2, HIPAA, and HITRUST considerations across a growing healthcare AI

Qualifications

• 5+ years in security engineering or infrastructure with security ownership.
• Hands on SOC 2 and HIPAA experience in production environments, with Vanta, Drata, or similar.
• Application security: secure code review, threat modeling, and CI/CD scanning.
• Identity and access management with SSO/MFA across SaaS.
• Strong GCP or AWS security; Kubernetes and Terraform in production.
• Scripting in Python or Go.
• Clear communication with engineers, auditors, and customer security teams.

Responsibilities

• Run our compliance program: SOC 2 Type II, HIPAA safeguards, risk assessments, vendor BAAs, and pen test remediation.
• Lead customer security reviews, questionnaires, and audits across U.S. and MENA.
• Set security guidelines for engineering: secure design reviews, application security standards, and code scanning.
• Own identity and access: Auth0, Google Workspace, SSO and MFA, access reviews, and least privilege.
• Build and operate infrastructure with GCP, GKE, Terraform, and CI/CD, with IAM hardening and policy as code.
• Govern PHI: access policy, audit logging, retention, and security review of new data flows.
• Own detection and incident response: logging, runbooks, and breach notification process.
• Secure our AI agents: threat model prompt injection and data disclosure controls.

Skills

Security engineering

Cloud security

Kubernetes security

CI/CD security

Identity access

SOC 2 HIPAA

Python/Go

Auditor comms

Tools

Auth0

Okta

GCP

Terraform

Job description

Sage Care Inc is hiring its first dedicated Security Engineer to own security and compliance across the platform, applications, identity, and SaaS footprint. You’ll influence engineering guidelines, implement critical controls, and be the technical voice for customer security teams.

You’ll report to the Head of Core Platform, Infrastructure and Security, serving as Sage’s Security Officer and HIPAA Lead. This role spans SOC 2, HIPAA, and HITRUST considerations across a growing healthcare AI