Lead Security Engineer

The role

The Lead Security Engineer will build security guardrails, tooling, and standards for an engineering organization embracing AI-assisted development. This role sits at the intersection of cloud security, AI-enabled engineering, and identity and access management to design and enforce security-by-design principles across AWS, CI/CD pipelines, and developer tooling.

What you will do

• Audit current cloud security posture and IAM architecture across AWS environment
• Assess existing AI-assisted development tooling for security risks
• Design and implement AI-driven tools and workflows for security monitoring, threat detection, incident response, and IAM governance
• Develop and enforce policies to protect AI tools and platforms from misuse and data breaches
• Deliver IAM solutions enabling secure, granular access controls
• Own the security strategy for AI-enabled development and cloud infrastructure
• Ensure compliance regulations including HIPAA and privacy are met for new services and infrastructure
• Develop and drive cybersecurity initiatives related to incident response, threat intelligence, and vulnerability management
• Mentor team members in adopting new security tools and processes
• Author technical proposals with measurable security OKRs

Required qualifications

• Bachelor's degree in a technical, engineering, or scientific field or comparable education/experience
• 3+ years in cybersecurity
• 3+ years focused on security operations or IAM
• 2+ years of experience in cloud security operations, specifically AWS
• 2+ years of coding experience (e.g., Python, Go, or TypeScript)
• Hands-on experience developing Terraform and infrastructure-as-code
• Hands-on experience securing AI/ML systems, including data pipelines, model deployments, and API integrations

Nice to have

• AWS Solutions Architect or Security Specialty certification
• AI/ML security certifications or familiarity with adversarial machine learning threats and mitigation strategies
• Experience building or integrating security controls into CI/CD pipelines and AI-assisted development workflows
• Experience managing an Enterprise IdP, especially Okta, with deep understanding of OAuth 2.0 and SAML
• SOC 2, PCI, or HIPAA audit/training certifications
• Knowledge of low-level networking principles

Benefits

• Comprehensive medical, dental, and vision coverage
• Help with gender-affirming care
• Tools for family and fertility planning
• Travel reimbursements if healthcare isn't available where you live
• Traditional or Roth 401k retirement plan options with a 2% company match
• Modern life stipends for learning and development
• Discounted company stock through ESPP

About the company

Hinge Health uses technology to scale and automate the delivery of healthcare for musculoskeletal (MSK) conditions. The company is headquartered in San Francisco with additional offices in Montreal and Bangalore.