Cloud and AI Security Engineer

This is a fully remote position, open to applicants in California.

📋 Description

• Oversee significant security projects, proactively strengthen system defenses, and ensure adherence to regulations such as HIPAA and the HITRUST r2 CSF.

• Create secure and robust code for security tools, automation, and essential integrations to enhance our security posture. Promote the adoption and integration of Suki’s standardized security solutions across all business units.

• Collaborate with leaders from various departments at Suki to minimize friction, enhance speed-to-market, and deliver products designed with security in mind.

• Execute security assessments and red-teaming on proprietary and third-party AI/ML models, LLMs, and data pipelines, focusing on testing for prompt injection, data poisoning, training data extraction, and model inversion.

• Establish guardrails to prevent the exposure of PHI during model training, in vector databases, RAG architectures, and fine-tuning datasets.

• Take ownership of the technical security architecture across our multi-cloud environment (AWS / GCP / Azure), ensuring adherence to zero-trust principles and implementing robust Cloud Security Posture Management (CSPM).

• Secure Kubernetes clusters, container registries, and Infrastructure-as-Code (Terraform / CloudFormation) within CI/CD deployment pipelines.

• Design and enforce least-privilege IAM policies, role-based access controls (RBAC), just-in-time (JIT) provisioning, and secrets management across cloud environments.

• Develop and enforce microsegmentation, VPC architecture, SASE/VPN solutions, and stringent network isolation for multi-tenant health data architectures.

• Manage network security controls, intrusion detection/prevention systems (IDS/IPS), and Web Application Firewalls (WAF) to prevent unauthorized data exfiltration.

• Proven experience in cloud network design, VPC routing, cloud firewalls, Zero Trust Network Access (ZTNA), and egress control.

⛳️ Requirements

• 7+ years of experience in Information Security, with at least 1 year focused on evaluating and mitigating AI-related risks.

• Practical experience in securing AWS, GCP, or Azure environments using automated tools and native security services.

• Strong programming skills for developing secure tools and automation, including the use of agentic AI.

• In-depth knowledge of healthcare compliance standards and security protocols, including HIPAA / HITECH, HITRUST CSF, and NIST, along with a foundational understanding of NIST AI RMF in a cloud context (GCP preferred).

• Proven leadership abilities with experience in managing security projects and mentoring junior team members.

• Excellent communication and collaboration skills to facilitate technical discussions.

🏝️ Benefits

• A mission that counts: Suki is transforming healthcare technology to be unobtrusive and supportive—allowing clinicians to concentrate fully on patient care.

• A product that performs: Our AI is utilized by actual clinicians in real health systems—and it is effective.

• A team that understands: We are comprised of former Googlers, Apple engineers, Stanford doctors, and healthcare veterans.

• Supported by believers: We have secured $165M in funding from leading venture capital firms such as Venrock, First Round, Flare, and March Capital.

• On an upward trajectory: Recognized by Fast Company as the Next Big Thing in Tech.

• Acknowledged for excellence: Awarded Best Leadership Team by Comparably and the Technology Innovation Award by Frost & Sullivan.

• A vast market opportunity: We are disrupting a $30B+ industry, and our momentum is substantial.