Senior/Staff Engineer, Cloud & Infrastructure Security

About Us

The company was born to tackle a critical challenge: making mental health care more effective and accessible for everyone. Since launching in 2020, 15 million sessions have started on the company, and we've barely scratched the surface. We do it through a three-sided marketplace that empowers providers, augments insurance payors, and serves patients. Every solution we build reveals ten more waiting to be delivered, and that's just what gets us going. We've backed that ambition with more than $328M in funding, including our Series D at a $3B valuation from Sequoia Capital, Transformation Capital, TCV, SignalFire, Menlo Ventures, Goldman Sachs Alternatives, and others.

At the company, the work you do can literally change someone's life. Your work here doesn't stay on a screen; it impacts whether someone can find, afford, and access quality care. That ambition sets us apart, and offers you an endless runway to impact one of the world's most urgent issues. We don’t have passenger seats here. Everyone is driving something that matters.

This work deserves real commitment. So if you thrive on meeting problems head on, untangling serious complexity, and working at pace with the sharpest yet kindest people around, you've come to the right place.

THE OPPORTUNITY

You'll build and mature our cloud security posture, working closely with infrastructure, engineering, and compliance to deliver secure products for the providers and patients on our platform. You'll also be in a rare position to shape how AI gets used in security here, not just adopting tools yourself, but designing agents that take on real security work.

WHAT YOU'LL BE DOING

• Design and build the security foundation for the company's infrastructure as it scales

• Research the threats and attack methods most relevant to the company's applications and infrastructure, and turn that research into real solutions

• Improve our cloud security posture in close partnership with infrastructure, engineering, and compliance

• Respond to security incidents, from critical to routine, and participate in an on call rotation

• Build defense in depth through secure by default architecture, closing gaps before they turn into incidents

• Define and track the KPIs that show whether our cloud security program is actually working

• Build and deploy AI agents that strengthen threat detection, alert triage, vulnerability management, and incident response, reasoning through problems and escalating to a human when needed

YOU'LL BE A GOOD FIT IF

• 6+ years of experience in the Cloud Security domain.

• You have deep AWS security experience: IAM, secure service configuration, CloudTrail, SCPs, AWS Organizations, Config, and similar tooling

• You have real depth in Kubernetes security, including secure deployments, network policies, service to service auth, RBAC, workload identity, admission controllers, and runtime security

• You're comfortable with infrastructure as code and think about the full lifecycle of a problem, not just the tool that patches it

• You care about how your work lands on the people around you, from the patients whose data you protect to the teams you partner with, and you bring strong opinions to security design decisions

• You've actually built and deployed production grade AI agents or agent powered tools for security work, not just experimented with or advised on them

Employment Type: Full Time, Exempt

Base Compensation: The base compensation range for this position is

• Hybrid Commitment: $182,000- $250,000 USD Annually

• Fully Remote Commitment: $152,000–$208,000 USD Annually

This role can be hybrid (onsite from our NYC, San Francisco, or Seattle hub location three days per week: Tuesday, Wednesday, Thursday) or fully remote. Both arrangements include travel 2–3 times per year (e.g., company and department offsites).

The base compensation for this role will vary depending on several factors, including relevant experience, qualifications, and the candidate’s working location.

Full Time Employee Benefits

• Health Benefits: Comprehensive medical, dental, vision, life, and disability coverage.

• the company for the company: No cost access to the company through the the company platform (available to US employees)

• Financial Wellness: Retirement savings programs and equity opportunities to help you invest in your future.

• Flexible Time Off, Paid Holidays & Winter Break: Flexible time off, company paid holidays (which vary by country), and a full company wide Winter Break to rest and recharge

• Parental Leave: Up to 18 weeks of paid parental leave to support you and your growing family and a new child stipend.

• Mental Health Mornings/Afternoons: Dedicated weekly flexible time for self care, whether that's the company, exercise, journaling, time with family, or simply taking a break.

• Wellness & Development Stipend: Annual stipend to support your personal wellbeing and professional growth, from fitness and education to books and learning resources.

• Commuter Benefits: Pre tax commuter benefits to support teammates working from one of our hub locations.

• Home Office & Meals: Support for your home workspace plus meal benefits, with offerings tailored to both remote and hub based employees.

• Additional Perks: A variety of wellbeing benefits, including wellness memberships, virtual care, pet insurance discounts (where available), and global travel assistance.

Research shows that some groups hesitate to apply unless they meet every qualification. If you’re excited about this role but don’t check every box, we encourage you to apply. At the company, we value diverse experiences, transferable skills, and the unique strengths each person brings.

The company is proud to be an equal opportunity workplace and is an affirmative action employer. We are committed to equal employment opportunity regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity or Veteran status. We also consider qualified applicants regardless of criminal histories, consistent with legal requirements.

Use of AI Tools: We use certain AI and automated tools to support recruitment. These tools help our team review applications, organize interviews, detect potential application integrity issues, and maintain interview records; they do not make final hiring decisions.

Application Review: Ashby's AI-Assisted Application Review helps review application materials against role-specific criteria and may flag potential fraud or integrity issues for recruiter review. All advancement decisions are made by our human recruiting team after independent review. See Ashby's AI Bias Audit Report [link for members]

Interview Recording: We use BrightHire to record interviews, supporting note-taking and consistency across candidates. Learn more [link for members] Interviews are confidential; you may ask your interviewer to stop recording anytime, or opt out in advance [link for members] Choosing not to be recorded will not, by itself, affect your candidacy.

AI-Assisted Recruiter Screen: For select roles, BrightHire's AI features may help structure initial recruiter screens and organize interview notes. All responses are reviewed by our recruiting team; no hiring decisions are made by AI alone.

State-specific notices: Depending on your location, you may have additional rights. Illinois: If AI analyzes a video interview, we'll provide notice, explain how it works and what it evaluates, and obtain consent beforehand. New York City: Where required, we'll provide at least 10 business days’ notice before using an automated employment decision tool and explain how to request an alternative process. Maryland: We do not use facial recognition to create facial templates during interviews unless required notice and written consent are obtained.

Questions, accommodation requests, requests for an alternative selection process, objections to recording, or concerns about AI use? Contact [link for members] We’re happy to help or offer an alternative way to participate.