Staff Security Engineer

SmarterDx is transforming how health systems use clinical AI to capture the full value of patient care delivered. Built by physician-data scientists and trained on clinically-validated EHR data, our clinical AI platform interprets the nuances behind every patient story and makes clinically-sound recommendations for revenue cycle teams — helping hospitals recover earned revenue, improve quality metrics, reduce denials, and streamline revenue cycle operations. As a Smartian, you’ll help build technology that makes healthcare more accurate, sustainable, and effective for everyone. Learn more at smarterdx.com/careers.Role SmarterDx Security Engineering has a broad scope: AI, cloud, and enterprise security, plus reviews of new designs and code across the company. We are a small team, and each engineer owns a domain. This role is our senior technical anchor for the two areas where we most need depth as the team grows: AI security and threat detection and response. On the AI security side, you will own how SmarterDx adopts AI and agentic tooling safely. That includes the guardrails for agentic access to our cloud and data, the security of the AI and ML workloads in our product, and the standards other engineering teams follow so that most AI adoption can happen without a security engineer in the room. On the detection side, you will own our detection platform (Panther), our detection strategy and coverage, and our incident response readiness. As the most senior security IC on the team, you will also be a resource across cloud and code security reviews, and you will mentor teammates who are still building their security depth. **This role is fully remote within the US** What You’ll Do Own our approach to AI and agentic security: guardrails for agentic access to cloud and data, and the security of the AI and ML workloads in our product. Publish the org's AI-security standard and drive its adoption by other engineering teams. Own our detection platform (Panther): detection strategy and coverage across cloud, container, and SaaS log sources, and the standards that keep detections high-signal as we grow. Own incident-response readiness: the plan, the playbooks, and tested tabletops tied to the HIPAA breach-notification timeline, and help lead response when a real incident happens. Lead complex security work across teams from start to finish, resolving ambiguity and coordinating with Platform, Engineering, and Compliance. Act as the senior security resource across cloud security and security reviews, and the security expert other engineering teams seek out for guidance on high-stakes decisions. Mentor teammates who are growing their security depth, set team standards for detection authoring and code review, and help raise our interview and hiring bar. Build and grow security automation that gives a small team more reach, and contribute to the tooling the team runs on. Take part in architecture reviews and threat modeling on our highest-risk designs, and co...