Cloud and AI Security Engineer

The Future of Healthcare Needs You Are you a security leader looking to make a real impact? As a Cloud & AI Security Engineer , you will serve as the primary technical architect and hands-on leader securing our enterprise cloud infrastructure, high-throughput network boundaries, and cutting-edge AI/ML product capabilities. In a high-growth healthcare SaaS environment handling sensitive Protected Health Information (PHI), security is both a core technical requirement and a business driver. You will bridge the gap between traditional cloud/network security and emerging AI risk management, collaborating directly with our 100+ members of the engineering and data science teams to build secure, scalable systems that earn the trust of major healthcare systems. Here's a sneak peek of what you'll be doing: Project Leadership: Manage large security projects, proactively enhance system defenses, and ensure compliance with regulations like HIPAA and the HITRUST r2 CSF. Automation & Development: Develop robust and secure code for security tooling, automation, and critical integrations to improve our security posture. Drive adoption and integration of Suki’s paved path security solutions across all business units. Collaboration: Partner with cross-departmental leaders in Suki to reduce the friction, increase speed-to-market and deliver secure-by-design products. AI/ML Security & Risk Assessment: Conduct security assessments and red-teaming on proprietary and third-party AI/ML models, LLMs, and data pipelines (testing for prompt injection, data poisoning, training data extraction, and model inversion). PHI & Data Privacy Governance: Implement guardrails to prevent PHI exposure in model training, vector databases, RAG architectures, and fine-tuning datasets. Cloud Posture & Architecture: Own the technical security architecture across our multi-cloud footprint (AWS / GCP / Azure), ensuring zero-trust principles and robust Cloud Security Posture Management (CSPM). Container & IaC Security: Secure Kubernetes clusters, container registries, and Infrastructure-as-Code (Terraform / CloudFormation) within CI/CD deployment pipelines. Identity & Access Management (IAM): Design and enforce least-privilege IAM policies, role-based access controls (RBAC), just-in-time (JIT) provisioning, and secrets management across cloud environments. Zero Trust & Network Segmentation: Design and enforce microsegmentation, VPC architecture, SASE/VPN solutions, and strict network isolation for multi-tenant health data architectures. Egress/Ingress Monitoring: Manage network security controls, intrusion detection/prevention systems (IDS/IPS), and Web Application Firewalls (WAF) to prevent unauthorized data exfiltration. Network Security Mastery: Proven track record in cloud network design, VPC routing, cloud firewalls, Zero Trust Network Access (ZTNA), and egress control. What we're looking for: 7+ years in Information Security, with 1+ years evaluating and remediating AI risk Hands-on experience securing AWS, GCP, or Azure environments using automated tools and native security services. Strong coding skills for developing secure tooling, automation, including leveraging agentic AI. Deep understanding of healthcare compliance standards and security protocols, including HIPAA / HITECH, HITRUST CSF, and NIST including a foundational understanding of NIST AI RMF in a cloud environment (GCP preferred). Demonstrated leadership ability with experience managing security projects and mentoring junior team members. Excellent communication and collaboration skills to lead technical discussions. What Makes Suki, Suki A mission that matters: Suki is making healthcare technology invisible and assistive—so clinicians can focus fully on patient care. A product that delivers: Our AI is used by real clinicians at real health systems — and it works. A team that gets it: We’re former Googlers, Apple engineers, Stanford docs, and healthcare veterans. Backed by believers: We’ve raised $165M…