OpenEvidence
Security Engineer, Platform Security
About this role
OpenEvidence seeks a Security Engineer to architect and secure their medical AI platform's cloud infrastructure, ensuring compliance and resilience for healthcare providers worldwide. You'll design defense-in-depth security controls, improve observability, and own the security posture of mission-critical systems handling sensitive medical data.
What you'll do
- Design and harden cloud infrastructure using defense-in-depth security principles
- Establish robust security controls across services and data platforms
- Improve security observability and monitoring across production systems
- Ensure compliance integrity for healthcare and medical data requirements
- Own overall security posture and resilience of the production ecosystem
- Work across products and projects to drive maximum security impact
What they're looking for
- Cloud infrastructure security and hardening
- Defense-in-depth security architecture
- Security observability and monitoring
- Compliance and regulatory knowledge (healthcare/medical data)
- Production infrastructure and systems
- Data platform security
- End-to-end ownership mindset
- Autonomous problem-solving
Opens the application — the Jobs AI extension fills it for you. Set up autofill
Opens the official application on the employer’s site. No login required.
OpenEvidence
OpenEvidence builds a widely-used medical AI platform that serves healthcare providers globally, helping clinicians make better medical decisions. The company is hiring for infrastructure, backend, security, data platform, and product engineering roles to build and scale mission-critical systems supporting their healthcare AI platform.
View all jobs at OpenEvidenceLikely interview questions
- Walk us through a time you designed and hardened cloud infrastructure from scratch. What defense-in-depth principles did you apply, and how did you measure the improvement?
- Describe your experience securing systems that handle sensitive data (medical, financial, PII). What compliance frameworks have you worked with, and how did you balance security controls with engineering velocity?