Security Engineer – Cloud & Healthcare

About the role

Curely AI is building AI‑driven solutions for clinical data, and security is at the core of its mission. As a Security Engineer you will own the end‑to‑end technical security program, protecting cloud infrastructure, applications, and data pipelines in a highly regulated healthcare environment.

Key responsibilities

• Design, implement and maintain security controls across AWS cloud services (IAM, KMS, GuardDuty, Security Hub).
• Lead HIPAA, SOC 2 Type II and HITRUST compliance initiatives, coordinating with auditors and consultants.
• Conduct threat modeling, vulnerability assessments and penetration testing for applications and CI/CD pipelines.
• Develop security tooling, monitoring dashboards and incident‑response playbooks.
• Review code and architecture for security risks and champion secure‑by‑default development practices.

Required profile

• Bachelor’s degree in Computer Science, Information Security or a related field.
• 4+ years of security engineering experience in cloud‑native environments.
• Hands‑on experience with AWS security services and healthcare compliance frameworks.

Required skills

• AWS (IAM, KMS, GuardDuty, Security Hub)
• HIPAA/HITECH technical safeguards
• SOC 2 Type II and HITRUST CSF
• Application security tools (SAST, DAST, dependency scanning)
• Secrets management (HashiCorp Vault, AWS Secrets Manager)
• Zero‑trust architecture concepts
• Security certifications (CISSP, CISM, AWS Security Specialty) – preferred

What we offer

• Competitive salary plus equity participation.
• Opportunity to shape security strategy for a fast‑growing AI healthtech company.
• Collaborative environment with a focus on continuous learning and innovation.