Product Security Engineer

Latent•San Francisco, CA

12d•$200,000 - $240,000

About The Position

Latent is the enterprise pharmacy intelligence platform, powered by a clinical agentic engine, that enables health systems to grow their pharmacy operations and serve more patients. One engine works across the pharmacy journey to identify patients who qualify for care, improve medication access, capture eligible prescriptions and support patients throughout treatment. Latent’s platform enables more than 60 leading health systems that collectively serve an estimated 70 million people. Founded by Sriram “Sri” Somasundaram and Rishabh Jain, Latent has raised $80 million from Transformation Capital, Spark Capital, Conviction, General Catalyst, Y Combinator, and others. We’re building the intelligence layer of American healthcare. Our systems sit directly in critical workflows and power how clinical AI is delivered and used in practice. The work here translates into faster access to treatment and significantly less operational burden for healthcare teams. You’ll be working on the core systems that make this possible.

Requirements

You’re a builder who holds yourself and others to high standards. You can design, develop, and create security automations and workflows using AI that can scale Latent’s security team.
Ownership: You don’t hand off problems or wait for someone to tell you what to do. Find our gaps, risks, and vulnerabilities and implement the solution.
Bias for Action: You won’t wait for someone else to solve a problem you’re in a position to solve.
A Yes Mindset: Latent’s Security team is not a no factory. While we put our foot down when the risk is high, our goal is to find creative solutions that 1) Understand what an employee actually needs and 2) That balances speed and security.
Automation Mindset: You’re always looking for ways to move faster by automating repetitive or manual work.
Complexity Management: You’re good at planning and building the simplest solution that gets the job done, with an eye towards the future as Latent scales quickly. You can take a complex and large product and break it down into focused, iterative steps that incrementally make our security and compliance posture better.
Product Focus: You’re comfortable working closely with the customers that use Latent’s security program: Latent’s employees! You love sitting alongside folks from all areas of the company, understanding their day to day, and crafting the perfect solution for them both now and in the future.
You aren’t afraid to use coding agents to contribute solutions directly to the code base! (You don’t have to be a coding wizard Harry, but you do need to understand basic engineering principles to give your coding agent positive feedback if it spits out the wrong solution)
You’ve built out IAM workflows (Okta, SSO, SAML, JIT provisioning) to give employees just the right amount of access to get their job done
You’ve designed and rolled out managed settings for AI tools and coding agents to make sure employees have a good sandbox to work in to get their jobs done with AI
You have collaborated with developers to help them write secure code and secure features.
You’ve helped harden AWS cloud and CI/CD environments (Think well-scoped IAM roles, hardening cloud environments to CIS standards, picking the right CSPM and driving down a findings backlog ect..)
You’ve helped build and maintain a vulnerability management program all the way up the stack (Server/Container/3rd Party OSS/Custom Code)
You’ve automated security and compliance requirements for MacOS and BYOD endpoints using an MDM
You understand your way around a security alert, security investigation, and can write and tune detections that are relevant to Latent’s environment

Nice To Haves

You have experience working at an early stage startup doing security
You’ve worked with healthcare data before and can speak a little HIPAA
You’ve participated in or built controls for SOC2 audits

Responsibilities

Mature and harden Latent’s cloud environment from a security and compliance standpoint into a secure-by-default stance so developers can ship code with confidence and the Infrastructure team doesn’t have to worry that their next Terraform apply will put everything on the open internet.
Help us give all of our employees access to the latest and greatest AI-powered tools in a secure and compliant way so our agents don’t run amok and do the wrong thing.
Help us secure our data warehouse so that our internal employees and customers get the insight they need without sacrificing our commitment to patient security and privacy.
Help us come up with ways to automate all aspects of the SDLC from a security perspective to ensure security is built in instead of being a bolt-on afterwards. In addition, as Latent plans the next iteration of its application and agentic platform, help us come up with the right security requirements for new product features and enhancements.
Help our hard-working IT folks secure Latent employee devices and applications. Automate security around IT and business applications including user lifecycle provisioning, just-in-time access, elevated access provisioning, and device hardening to ensure employees can do their job securely without thinking about security.
Help the Security team investigate potential incidents, build detections that are specific to Latent’s environment, and work with our AI-native MDR service to improve accuracy around escalated incidents.