Senior IT/Security Engineer (AI-native)

Incredible Health

18d • Remote

About The Position

Incredible Health is seeking a Senior IT/Security Engineer to manage and advance its IT and security practices. This is a key role responsible for the entire IT and security function, building upon an existing mature security program with SOC 2 Type 2 certification. The engineer will be the sole IT and security point person, tasked with running, enhancing, and ensuring the confidence of hospital partners in the company's security posture. The role requires a proactive and ownership-driven individual to serve as the master of IT and security for the company.

Requirements

• At least five years of experience in IT/Security Engineering.
• Experience owning a SOC 2 Type 2 audit cycle, including evidence collection and auditor interaction.
• Strong cloud security skills, with experience securing AWS and Cloudflare.
• Experience deploying and administering IAM, EDR/XDR, SIEM, CSPM, MDM, and GRC platforms (e.g., Vanta).
• Experience answering security questionnaires from large enterprise or healthcare customers.
• Informed opinions about AI security, including securing internal AI tools, evaluating AI vendors, and translating technical AI concepts for enterprise customers.
• Experience scaling security measures to combat increasing threats in a fast-paced, high-tech environment.

Nice To Haves

• Experience with Heroku and Google Workspace security administration.

Responsibilities

• Owning the compliance program end-to-end, including driving annual SOC 2 Type 2 audits and managing Vanta.
• Completing security questionnaires, addendums, and AI risk assessments for hospital clients.
• Running Business Continuity and Disaster Recovery (BCDR) tests and treating them as live incidents.
• Coordinating annual penetration tests and managing remediation of findings within SLAs.
• Managing security across the technology stack, including AWS, Heroku, Cloudflare, Google Workspace, GitHub, and communication tools.
• Administering the laptop fleet for a fully remote team, including imaging, shipping, MDM enrollment, inventory, and end-of-life processes.
• Running access reviews and enforcing least privilege principles, including pruning admin lists, enforcing SSO and 2FA, and tuning password policies.
• Ensuring seamless onboarding and offboarding access for new and departing employees in partnership with HR and Finance.
• Evaluating and securing AI tooling, including team usage of AI tools and partnering with engineering on customer questions regarding AI risk, bias testing, and model governance.
• Conducting vendor management and procurement reviews, identifying potential cost savings.
• Staying updated on the AI threat landscape and adapting defenses and team training accordingly.
• Educating the team on security best practices.
• Advising leadership on security matters during project planning and collaborating with engineers on identified improvements.
• Leading incident response, analysis, and documentation in the event of a security incident.
• Supporting co-workers with IT issues in a helpful and friendly manner.

Benefits

• Competitive, market-based salary.
• Comprehensive benefits package including medical, dental, and vision coverage with shared premiums.
• Company-sponsored 401(k) plan.
• Commission and/or equity may be offered.
• Unlimited vacation.
• Generous family leave policy.
• Team events and activities.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed