[Hiring] Senior Security Engineer @AxisCare

Role Description

AxisCare is hiring a full-time, fully remote Senior Security Engineer to own security and compliance across our SaaS platform, the market-leading product powering the home care industry. This is not a job where you'll write policies that nobody reads. You'll work directly with product engineering teams, embedded in how we build software, shaping our security posture. You'll own engineering's side of our SOC 2 Type II compliance program, lead us toward HITRUST certification, and keep our AWS infrastructure, Docker pipelines, and PHP/React codebase hardened as we move fast.

We're also building AI-powered products on top of Amazon Bedrock and our own machine learning models, and we use AI heavily in how we develop software. That creates new kinds of risk that most security playbooks don't cover yet. We need someone who's thinking about this already and building the guardrails that agents need to write secure software. Home care agencies trust us to run their business every day. Their data includes protected health information. We need someone who takes that personally.

Job Duties

• Own AxisCare Engineering's security program as an individual contributor.
• Continually improve our security standards as threats evolve.
• Strengthen the systems that enforce security standards and work directly with engineers to close gaps.
• Own engineering's share of SOC 2 Type II compliance: control design, evidence collection, audit prep, and gap remediation.
• Chart the path toward HITRUST certification, mapping what we already have and building what we don't.
• Threat-model our application and infrastructure.
• Raise the bar on security for our PHP/React modular monolith on AWS.
• Own and improve our security scanning program.
• Assess and mitigate security risks inherent in our AI products.
• Strengthen our detection and response capabilities: logging, alerting, incident response playbooks.
• Keep our security policies clear, current, and short.
• Train developers on secure practices without burying them in process.

Qualifications

• A builder, not just an auditor.
• A technical peer to engineers.
• A pragmatist who understands the need to ship.
• A strong writer for clear communication.
• An AI-aware security thinker.

Requirements

• 5+ years in application security, infrastructure security, or security engineering at a SaaS company.
• Hands-on experience with AWS security (IAM, VPC, Security Groups, KMS, CloudTrail, GuardDuty).
• Experience owning or heavily contributing to the engineering side of SOC 2 Type II compliance.
• Familiarity with container security (Docker, Kubernetes) and infrastructure-as-code (Terraform).
• Solid grasp of web application security fundamentals (OWASP Top 10, secure SDLC).
• Experience securing AI/ML systems or LLM-powered products.
• Concrete examples of using AI to improve security work.
• Able to work remotely from the Eastern, Central, or Mountain time zones.
• Qualified to work in the United States or Canada.

Preferred

• Experience building or maintaining HIPAA-compliant or HITRUST-certified environments.
• CISSP, OSCP, or AWS Security Specialty certification.
• Background in penetration testing or red team work.

Compensation and Benefits

• Competitive salary and comprehensive benefits package.
• Opportunities for professional growth and career development.
• Flexible work arrangements, including remote work options.
• Health, dental, and vision insurance.
• 401(k) plan with company matching.
• Company will provide laptop and other needed computer equipment.

How to Apply

Apply with a brief resume and either a written or video cover letter. We review the cover letter before anything else in your application, so this really matters. This is your single biggest opportunity to improve your chances, and video submissions go right to the front of the line.

Prompt: How has AI changed the security landscape you work in: what's gotten easier, what's gotten harder, and how have you adapted? Tell us about a security program, control, or hard problem you're proud of owning. Tell us why this position is the one you've been hoping to find.

• Written: No more than 600 words. We're looking for clarity of thought and strong communication. Use AI if you want, but don't send slop.
• Video: 1–2 minutes, linked in the "Website, Blog, or Portfolio" section of your application. Doesn't need to be highly produced. We care about how you think and communicate.

Company Description

AxisCare was started in 2011 by industry leaders to help meet the demand for a more user-friendly and mobile-compatible solution. Our product is a web-based management platform that helps agencies manage CRM and marketing, Caregiver/Client scheduling, billing, payroll, and much more. Headquartered in Waco, TX, AxisCare has clients in all 50 states as well as 6 other countries. We are a fast-growing company seeking high-performing individuals looking for a fast-paced, autonomous working environment.

We are an Equal Opportunity Employer and comply with ADA regulations as applicable.