Information Security Engineer (Healthcare)

TL;DR

Information Security Engineer (Healthcare AI): Own security posture for AI diagnostic platform processing millions of consultations with accent on compliance maintenance and infrastructure safeguards. Focus on implementing HIPAA/SOC 2 controls, conducting penetration testing, and building scalable security automation.

Location: New York City (On-site)

Salary: $180K–$240K + Equity

Company

First AI legally authorized to practice medicine, HIPAA-compliant and SOC 2 Type II certified, serving millions of patients and enterprise partners.

What you will do

• Maintain SOC 2 Type II compliance and manage audits with external assessors
• Implement and monitor HIPAA technical safeguards across infrastructure and applications
• Conduct penetration testing, vulnerability assessments, and security reviews
• Perform vendor security reviews and respond to enterprise questionnaires
• Enforce security policies across engineering, operations, and business teams
• Respond to incidents, conduct post-analysis, and build monitoring automation
• Collaborate with engineering to embed security into development lifecycle

Requirements

• 7+ years information security experience in production environments
• Healthcare or fintech background required
• Hands-on technical skills: read code, configure systems, investigate incidents
• Deep experience with SOC 2, HIPAA, or equivalent frameworks
• Familiarity with AWS security controls, IAM, encryption, cloud best practices
• Strong communication for technical and non-technical audiences

Nice to have

• CISSP, CISM, CISA or equivalent certification
• Experience with health information exchanges, TEFCA, QHIN, interoperability
• Startup security program building experience
• AI/ML security, model protection considerations
• Mobile app security (iOS/Android)
• Medical device security or FDA digital health guidance

Culture & Benefits

• Equity opportunities to share in company growth
• Comprehensive health, dental, vision coverage plus mental health support
• Flexible time off
• Work directly with engineering and product teams in NYC