Senior Manager / Manager, Security

Plenful • San Francisco, CA

7d • Hybrid

About The Position

Plenful is a rapidly growing AI company in the healthcare sector, aiming to transform operations through automation. Having secured $50M in Series B funding, Plenful is developing a leading AI automation platform for healthcare operations, including hospitals, health systems, pharmacies, and payors. The platform is designed to eliminate manual tasks, reduce administrative burdens, improve compliance, and generate revenue for patient programs. Founded by healthcare operators, Plenful is committed to providing impactful tools to healthcare professionals and currently serves over 100 organizations nationwide. The company is seeking passionate individuals to help shape the future of healthcare.

Requirements

• 12+ years of progressive experience in cybersecurity, application security, security engineering, security operations, cloud security, or infrastructure security.
• 2+ years leading security teams, programs, or major cross-functional security initiatives.
• Deep, hands-on experience in application security and security operations.
• Demonstrated ability to investigate and remediate vulnerabilities in modern web applications, APIs, and distributed systems.
• Ability to read application code, reason about security flaws, and work directly with engineers on effective fixes.
• Experience with threat modeling, secure architecture reviews, penetration-test remediation, vulnerability management, and incident response.
• Experience integrating and operating security tooling across CI/CD pipelines and developer workflows.
• Strong technical background in modern cloud environments, preferably AWS, including IAM, logging, network security, secrets management, and Infrastructure as Code.
• Experience securing enterprise SaaS platforms and multi-tenant systems.
• Experience with healthcare security and compliance frameworks, including HIPAA and SOC 2.
• Strong judgment in prioritizing security work in a fast-moving environment with limited resources.
• Exceptional communication skills with the ability to work effectively with engineers, executives, customers, auditors, Legal, Compliance, and Sales.
• Bachelor's degree in Computer Science, Cybersecurity, Information Systems, or equivalent practical experience.

Nice To Haves

• Experience as an early security hire at a startup or high-growth technology company.
• Hands-on experience with Python, TypeScript, or similar modern application languages.
• Experience with HITRUST certification.
• Experience securing AI/ML platforms, agentic systems, and modern data infrastructure.
• Experience with Kubernetes, container security, Infrastructure as Code, and cloud-native architectures.
• Experience building security automation and internal security tooling.
• CISSP, CISM, CCSP, GIAC, or comparable certifications.

Responsibilities

• Lead and execute the security program, defining and implementing a pragmatic security roadmap aligned with business priorities.
• Lead a small security team and coordinate security efforts across Engineering, Product, IT, Legal, and Compliance.
• Personally execute critical security tasks while developing scalable processes and automation.
• Prioritize security risks based on exploitability, business impact, customer commitments, and regulatory requirements.
• Create security processes that support rapid product development without hindering innovation.
• Establish and mature secure software development lifecycle practices.
• Partner with engineers to identify, reproduce, prioritize, and remediate application vulnerabilities.
• Review application code and architecture, propose fixes, and contribute to security-related code changes.
• Lead threat modeling, secure architecture reviews, penetration testing, vulnerability management, and remediation tracking.
• Integrate SAST, DAST, software composition analysis, secrets detection, and other security controls into CI/CD pipelines and developer workflows.
• Build reusable guardrails, secure coding patterns, and automation for shipping secure software.
• Define and implement security standards for AI-powered products and machine learning systems.
• Build and operate security monitoring, detection, logging, alerting, and incident response capabilities.
• Triage security findings and incidents, lead investigations, coordinate containment and remediation, and drive postmortems.
• Develop incident-response playbooks and lead tabletop exercises.
• Establish and operate a risk-based vulnerability-management program.
• Improve detection coverage and response readiness.
• Strengthen security across Plenful's AWS infrastructure, including IAM, secrets management, hardening, endpoint security, and network security.
• Review Infrastructure as Code, Kubernetes, containers, and cloud architecture for security risks.
• Partner with Infrastructure and DevOps engineers to remediate findings and implement preventive controls.
• Lead Plenful's security compliance strategy, including SOC 2, HIPAA, HITRUST, and future certifications.
• Develop and maintain security policies, standards, and controls.
• Own or support vendor risk management and third-party security reviews.
• Partner with Legal and Compliance on security, privacy, incident response, and customer commitments.
• Represent Security during enterprise customer reviews and technical security discussions.
• Partner with Sales and Customer Success to support enterprise deals, security questionnaires, and customer due diligence.
• Communicate security posture, risks, incidents, investments, and priorities to executive leadership and the Board.
• Build a security-first culture through education, guidance, and partnership.

Benefits

• Full medical, dental, and vision insurance for you and participation for your family
• 401(k) with Company Match (50% of your first 3% contributed)
• Equity
• Unlimited PTO
• $100/week daily lunch stipend
• $100/month wellness stipend
• $100/month commuter benefits for SF and NYC-based employees
• Paid parental leave

What This Job Offers

• Job Type: Full-time
• Career Level: Senior