[Hiring] Senior Security Engineer @AIOS

Role Description

As Senior Security Engineer at AIOS, your fundamental role is to ensure we know who is on our systems, what they’re using, and exactly what happened when something goes wrong.

• Own identity for everyone who needs access: single sign-on, MFA, conditional access, and the joiner, mover, and leaver lifecycle.
• Own the fleet and the endpoint: device management, encryption, patching, lock and wipe when someone leaves, and endpoint detection and response from alert to containment.
• Own logging and detection: write detections that fire on real attacker behavior and automate the response.
• Partner with engineering on cloud security, focused on identity and logging.
• Run IT security: onboarding and offboarding for everyone, and the vendors and MSPs who handle day-to-day support.

Great performance in this role means every person and device that touches patient data is known and managed, the alerts that matter reach us fast, and any investigation can say exactly what happened.

This is a full-time, fully remote role, and you’ll work mostly async in the timezone of your choice — as long as you’re around until midday Pacific Time for calls as needed. You’ll have flex in your calendar for kids if you have them — many of our team have kids so we’re kid-friendly.

This is an individual contributor role. No management, you’ll be hands-on in the trenches. You’ll report directly to our Head of Information Security (Ryan Bentz). We’re intense, so you’ll also be intense.

You’ll also work most closely with our compliance and engineering leadership.

Qualifications

• 6+ years in security engineering, with hands-on depth across identity, endpoint, and detection.
• Experience running an identity provider hands-on: SSO and SCIM, conditional access, and device-aware policies.
• Experience running MDM/UEM at scale, including enrollment, encryption, and remote wipe.
• Experience running an EDR and working incidents from alert to containment.
• Experience writing detections and tuning them.
• Knowledge of how attacks work through red teaming, pentesting, bug bounties, CTFs, or similar.
• Ability to script and automate (Python, bash, etc.) and use AI agents to do more work.
• Knowledge of cloud security (AWS, GCP, or Azure) to partner with engineers on identity, logging, and access.
• Experience managing onboarding, offboarding, and IT operations for a distributed team, including managing outside vendors or MSPs.
• Ability to explain risk clearly to employees, engineers, and executives.

Requirements

• Experience in healthcare or another regulated environment (HIPAA, GDPR, PCI) is a plus.
• Experience owning an identity or device program through fast growth is a plus.
• Experience securing a distributed, multi-country workforce is a plus.
• Experience shipping tools, detections, write-ups, talks, or CVEs is a plus.

Benefits

• Compensation: $150k–$250k/yr including equity.
• Comprehensive medical insurance (if appropriate).
• Fully remote team.
• PTO with a yearly minimum (≥2 weeks/yr + local national holidays).
• Budget for books, courses, coaching ($1,200/yr).
• Budget for gym, health apps ($1,200/yr).
• Free membership with a clinic offering GLP-1s.
• Free biweekly health coaching.
• Free biweekly work coaching.
• Macbook & work-from-home equipment provided as needed.