Staff Security Engineer

SmarterDx Security Engineering has a broad scope: AI, cloud, and enterprise security, plus reviews of new designs and code across the company. We are a small team, and each engineer owns a domain. This role is our senior technical anchor for the two areas where we most need depth as the team grows: AI security and threat detection and response.

On the AI security side, you will own how SmarterDx adopts AI and agentic tooling safely. That includes the guardrails for agentic access to our cloud and data, the security of the AI and ML workloads in our product, and the standards other engineering teams follow so that most AI adoption can happen without a security engineer in the room. On the detection side, you will own our detection platform (Panther), our detection strategy and coverage, and our incident response readiness. As the most senior security IC on the team, you will also be a resource across cloud and code security reviews, and you will mentor teammates who are still building their security depth.

**This role is fully remote within the US**

• →Own our approach to AI and agentic security: guardrails for agentic access to cloud and data, and the security of the AI and ML workloads in our product.
• →Publish the org's AI-security standard and drive its adoption by other engineering teams.
• →Own our detection platform (Panther): detection strategy and coverage across cloud, container, and SaaS log sources, and the standards that keep detections high-signal as we grow.
• →Own incident-response readiness: the plan, the playbooks, and tested tabletops tied to the HIPAA breach-notification timeline, and help lead response when a real incident happens.
• →Lead complex security work across teams from start to finish, resolving ambiguity and coordinating with Platform, Engineering, and Compliance.
• →Act as the senior security resource across cloud security and security reviews, and the security expert other engineering teams seek out for guidance on high-stakes decisions.
• →Mentor teammates who are growing their security depth, set team standards for detection authoring and code review, and help raise our interview and hiring bar.
• →Build and grow security automation that gives a small team more reach, and contribute to the tooling the team runs on.
• →Take part in architecture reviews and threat modeling on our highest-risk designs, and communicate the resulting security architecture so the whole team can understand it and build on it.

• 8+ years in security and software engineering, with deep hands-on experience in AWS and cloud-native infrastructure, including working competence with containerized workloads (EKS) and infrastructure-as-code (Terraform).
• A track record of leading complex security work across teams and making other engineers more effective.
• Depth in AI and agentic security: securing LLM applications, agentic frameworks, and MCP, plus prompt-injection and agentic-access defenses.
• Depth in threat detection engineering: designing, authoring, and tuning detections in a modern SIEM, and reasoning about coverage against real threats.
• Incident-response experience, including building the plan and running the response.
• The ability to write production code (Python, Go, or TypeScript) and build security tooling, not only configure products.
• Strong writing and communication; you can publish a standard other teams adopt and explain a hard design to a non-security audience.
• Working knowledge of SOC 2 and HIPAA, and the judgment to design controls that hold up without stalling delivery.
• Experience mentoring and leveling up other engineers.

• Recognized AI-security work: published standards or research, contributions to AI-security tooling, or red-teaming of AI/LLM systems.
• Startup experience, especially in health tech or another regulated, data-sensitive environment.
• Deeper specialization in container security (Kubernetes/EKS, Helm) or in infrastructure-as-code and policy-as-code, beyond working competence.
• Experience consolidating or retiring a security platform with a measurable cost or coverage result.

• Cloud and infrastructure: AWS, Kubernetes (EKS), Terraform, Postgres
• Detection and security tooling: Panther (SIEM), GuardDuty, AWS Config, Wiz, Snyk, GitHub Advanced Security, CrowdStrike, Nightfall, Drata
• Languages: Go, Python, TypeScript
• AI and automation: Claude, MCP, and agentic tooling used across engineering