Staff Cloud Security Engineer (AI)

Location: Remote, anywhere in the United States

Salary: $151,000–$178,500 annual salary, plus equity options.

Company

AnswersNow is a venture-backed digital health company delivering virtual autism care and personalized therapy through a digital platform.

What you will do

• Architect, secure, and continuously harden AWS infrastructure, including IAM, networking, encryption, logging, detection services, serverless systems, databases, and EKS.
• Secure APIs and application systems through authentication, authorization, threat modeling, secure design reviews, security testing, vulnerability management, and penetration testing.
• Secure the real-time video platform, including WebRTC transport, session access controls, recording storage, and encryption.
• Establish AI security and governance policies, protect AI/ML systems against OWASP LLM Top 10 risks, and prevent unauthorized exposure of PHI and PII.
• Own SOC 2 Type I and Type II readiness, HIPAA Security Rule compliance, security policies, risk management, vendor assessments, and customer security questionnaires.
• Build detection, incident response, disaster recovery, identity and endpoint security programs while defining the security roadmap and mentoring engineers.

Requirements

• 8+ years of security engineering experience, including hands-on work securing production cloud environments.
• Deep AWS security expertise across IAM, networking, KMS, logging, detection services, and serverless security.
• Strong application and API security experience, including code and architecture reviews with development teams.
• Direct experience leading SOC 2 audits and HIPAA compliance in environments handling PHI, ideally in healthcare or health technology.
• Experience with Infrastructure-as-Code, CI/CD security, AI and LLM application security, OWASP LLM Top 10 vulnerabilities, and incident response.
• Applicants must be located in the United States and meet US work authorization requirements.

Nice to have

• Experience with Vanta, Drata, Secureframe, WebRTC, HITRUST, ISO 27001, or NIST frameworks.
• Experience building a security program from scratch at a startup or scale-up.
• AWS Security Specialty, CISSP, CCSP, OSCP, or similar certification.
• Experience with pediatric or behavioral health data and privacy considerations for minors.

Culture & Benefits

• Remote-first work environment within the United States.
• Equity options in a venture-backed, high-growth company.
• Comprehensive medical, dental, and vision coverage.
• Generous paid time off.
• Inclusive workplace with reasonable accommodation support.