Senior Security Engineer

About the company

the company is building a new kind of healthcare system across Medicaid, Medicare, and public assistance programs: one that recognizes that access to housing, nutritious food, and reliable transportation are just as critical to health as having the right medications or seeing a doctor.

As a public benefit corporation and AI-enabled medical group, we partner with shelters, food pantries, and community organizations to deliver “whole-person” care to the 115 million Americans who rely on the safety net. We are currently the largest complex care provider in California with over 500 employees and are expanding nationally. Our model replaces fragmented healthcare and social services systems with one trusted relationship for all medical, behavioral, and social needs. We improve access, build trust, and dramatically lower costs (52% fewer ER visits, 26% fewer hospitalizations). Our model is a rare combination of saving tax payer dollars ($150B annually at scale) while putting people on an upward life trajectory. At national scale, this approach would save taxpayers.

These outcomes are driven by the AI-first, whole-person infrastructure we are building — a platform that connects healthcare and social-service organizations into a unified network. Leveraging our vast data and years of operational experience, we are building the agentic infrastructure for the safety net to coordinate care, automate operations, and learn from every patient interaction to continuously improve outcomes.

Read more about the AI-First Medicaid System we are building here.

• Forbes: For the company, Accessibility Is About Delivering Healthcare To Those Who Need It The Most
• TechCrunch: Building for Medicaid’s regulatory moment with Neil Batlivala from the company
• Journal of General Internal Medicine: A Novel Intervention for Medicaid Beneficiaries with Complex Needs
  

About the Opportunity

As a HIPAA-regulated, AI-native company, security is foundational to our ability to serve patients. As our platform, AI capabilities, and regulatory footprint continue to grow, we're looking for our first dedicated Security Engineer to help scale our security posture alongside the business.

This is a highly hands-on engineering role. You'll own the implementation of security controls across applications, cloud infrastructure, AI systems, and compliance-driven initiatives. You'll help secure patient-facing voice agents, LLM-powered workflows, internal developer tooling, and a growing ecosystem of vendors and integrations. You'll partner closely with Engineering and IT to remediate findings, improve our security foundations, and build systems that enable the company to move quickly and safely.

This role is ideal for someone who enjoys building—an engineer who wants to write code, automate workflows, strengthen infrastructure, and help shape security at a company using AI to improve healthcare access for underserved communities.

This is a fully remote position reporting up to the IT Lead.

What You’ll Do

• Own vulnerability management, dependency security, threat modeling, security code reviews, and remediation of penetration test findings.
• Strengthen our AWS security posture, identity and access management (IAM, SSO, SAML, SCIM), endpoint security, threat detection, and incident response capabilities.
• Design and implement security controls for AI-powered products and workflows, including protections against prompt injection, data leakage, and other AI-specific risks.
• Build technical safeguards that enable the secure use of PHI and sensitive data within LLM-powered systems.
• Implement and maintain the technical controls, evidence, and security practices required to support HIPAA, SOC 2, and other compliance programs.
• Leverage AI-powered tooling, automation, and modern security platforms to scale security impact across the organization.
• Build self-service security solutions, paved roads, and runbooks that help engineers move quickly while maintaining strong security standards.
• Partner closely with Engineering and IT to deliver pragmatic, scalable security solutions that support product velocity and business growth.
• Be a force multiplier for the Pod-Infra team

What You’ll Need 

• 2+ years of Security Engineering experience, with significant depth in either application security or infrastructure/cloud security and working proficiency in the other
• Strong AWS and cloud security expertise, including IAM, identity management (SSO, SAML, SCIM), network security, secrets management, and cloud-native security tooling
• Hands-on software engineering experience with the ability to read, review, and ship production code in Ruby and/or TypeScript. Python experience is a plus
• Experience implementing technical controls in regulated environments such as HIPAA, SOC 2, HITRUST, PCI, or similar compliance frameworks
• Demonstrated fluency with AI and LLM-powered tools, including practical experience incorporating them into day-to-day engineering workflows
• Strong understanding of AI security concepts, including prompt injection, AI agent guardrails, data governance, PHI handling, and AI vendor risk
• Builder mindset with a bias toward execution, ownership, and practical problem-solving.
• Ownership mindset – own driving results for the mission, business, and customer experience
• Strong collaboration skills with thought partners from engineering, product, and legal
• Strong desire to work in an early stage startup environment that is fast paced, complex, and has minimal barriers to make decisions (no “red tape”)
• Passion for helping individuals experiencing complex chronic needs such as homelessness, severe mental illness, and substance use disorder

Bonus Points for the following:

• A consulting or advisory background 
• Experience as an early security hire at a startup, particularly as the first or early security engineer
• Experience securing consumer-facing or patient-facing AI products and applications
• Contributions to open-source security projects, security tooling, and/or published security research
• CISSP, OSCP, AWS Security Specialty, or similar certifications

Our Values

• Lead with integrity: We keep our commitments and take responsibility for our actions. We are dependable and choose authenticity over perfection.
• Embrace challenges: We leave our egos at the door and step forward into discomfort instead of back into safety. We help each other to learn and provide feedback using candor and kindness.
• Break through walls: We go the extra mile for our patients, partners and one another, and we run toward hard things. We are resilient in our push for consistent improvement and challenge the status quo.
• Act beyond yourself: We build each other up and respect boundaries. We seek first to understand and assume positive intent.
• Care comes first: We hold ourselves to the highest standards for our patients. We are relentless in the pursuit of our mission, and ensure that we are taking care of ourselves in order to care for others.

Because We Value You

• Competitive salary: $170,000 - $190,000 (depending on experience)
• Equity compensation package
• Flexible vacation policy – take the time you need to recharge
• Comprehensive medical, dental, and vision coverage
• 401(k)
• 100% company-sponsored short and long-term disability and life insurance
• Subsidized backup childcare and caregiver supports through Wellthy
• Work entirely from the comfort of your own home
• Monthly $100 work from home expense stipend 
• We provide the equipment needed for the role
• Opportunity for rapid career progression with plenty of room for personal growth!

the company is an Equal Opportunity Employer. At the company, we value diversity and strive to provide an inclusive environment for all applicants and employees. All applicants will be considered without regard to race, color, religion, sex (including pregnancy, gender identity, and sexual orientation), national origin, marital status, age, disability, political affiliation, military service, genetic information, or any other characteristic covered by federal, state, or local law. 

the company participates in E-Verify to verify employment eligibility for new hires. 
Any offer of employment at the company is conditioned upon passing a pre-employment background check. Following a conditional job offer, candidates will undergo comprehensive employment background checks, including; criminal history, reference checks, and driving records if a role requires vehicle use.

We do not conduct any TA business outside of our @pairteam.com emails. If you’re ever concerned about spam or fraudulent activity, please reach out to [email removed].

Note: Please be aware that while we sincerely appreciate your interest, due to the high volume of requests, we're unable to respond to general position inquiries via email. To apply for a position with us, please submit your application for the role you are interested in. Our team regularly reviews applications and will reach out to candidates whose qualifications align with our current openings listed below. Thank you!