Senior IT/Security Engineer – AI-native

This is a fully remote position, open to applicants in Alabama, +30 more states.

📋 Description

• Taking full ownership of our compliance program, managing the entire process of annual SOC 2 Type 2 audits from gathering evidence to conducting auditor walkthroughs, while utilizing Vanta as our governance hub throughout the year.

• Completing security questionnaires, addendums, and AI risk assessments for the IT and security teams at our hospital clients, ensuring they recognize our commitment to best practices. (Health systems pose challenging and insightful inquiries. You will provide excellent responses.)

• Conducting genuine BCDR tests and treating them as real incidents to identify vulnerabilities before they become issues.

• Coordinating annual penetration tests and driving the remediation of findings within the established SLA.

• Overseeing security across our technology stack, including AWS, Heroku, Cloudflare, Google Workspace, GitHub, and our communication platforms.

• Managing our laptop fleet for a fully remote workforce — including imaging, shipping, MDM enrollment, inventory management, and end-of-life procedures — ensuring all machines are encrypted, managed, and capable of remote wiping.

• Executing access reviews and enforcing the principle of least privilege: streamlining admin lists, implementing SSO and 2FA, and refining password policies.

• Guaranteeing that new hires receive access to all necessary resources on their first day, and that departing employees are locked out on the same day — collaborating closely with HR and Finance to maintain a smooth onboarding/offboarding process through Rippling and Google.

• Assessing and securing AI tools — from our team's utilization of Claude and MCP servers to collaborating with engineering on customer inquiries regarding AI risk, bias testing, and model governance.

• Managing vendor relationships and procurement evaluations while identifying cost-saving opportunities.

• Keeping abreast of the rapidly changing AI threat landscape and adapting our defenses and team training as swiftly as the threats evolve.

• Acting as an educator, sharing knowledge about security with our team.

• Providing guidance to leadership on security issues during project planning and collaborating with our full stack engineers to implement improvements you identify.

• Stepping up as the key responder in the event of a security breach — leading the response, conducting analysis, and preparing post-incident reports.

• Assisting colleagues when they encounter technical difficulties with their computers, ensuring they feel comfortable reaching out to you for help.

⛳️ Requirements

• You have at least five years of experience in this field.

• You have independently managed a SOC 2 Type 2 audit cycle — collecting evidence, engaging with auditors, and achieving a successful outcome.

• Cloud security is a key strength of yours.

• Additional credit if you have experience securing AWS and even more if you have experience with Cloudflare.

• You have deployed and administered tools associated with major acronyms: IAM, EDR/XDR, SIEM, CSPM, MDM, and GRC platforms like Vanta.

• You have responded to security questionnaires from large enterprise or healthcare clients and know how to convert a 200-row spreadsheet into a successful deal.

• You possess knowledgeable perspectives on AI security — including safeguarding internal AI tools, evaluating AI vendors, and translating technical AI work into trustworthy responses for enterprise clients.

• You have successfully scaled security measures to counteract the increasing threats from phishers and breaches in a fast-paced, high-tech environment.

🏝️ Benefits

• We provide a competitive salary that reflects your skills and experience.

• Our extensive benefits package includes medical, dental, and vision coverage with shared premiums.

• Our company-sponsored 401(k) plan helps you save for your retirement.

• Commission and/or equity opportunities may be available depending on the role.

• Enjoy unlimited vacation time, allowing you to take breaks whenever necessary!

• We offer a generous family leave policy to give you time to bond with new family members.

• We encourage applications from candidates who are often underrepresented in our industry.

• We highly value culture, community, and camaraderie within our team — striving to create a work environment that fosters fun and celebration (including team events and trivia activities!).