Lead Security Engineer

THE OPPORTUNITY Join the team securing the platform that helps millions of people move beyond musculoskeletal pain. As Hinge Health's engineering organization embraces AI-assisted development — including AI-powered code generation, automated PR review workflows, agent sandboxing, and MCP gateway integrations — we need a Lead Security Engineer who will build the security guardrails, tooling, and standards that ensure we ship with confidence. You'll sit at the critical intersection of cloud security, AI-enabled engineering, and identity & access management, partnering closely with Application Security, SRE, and R&D Engineering to design and enforce security-by-design principles across our AWS environment, CI/CD pipelines, and developer tooling. This is your chance to make a real impact on the lives of millions by driving advancements in healthcare security — ensuring utmost compliance and privacy while enabling engineers to move fast and safely. Candidates must be within commuting distance to New York City WHO YOU ARE - A Security-First Thinker: You instinctively design systems that are secure by default, and you know how to balance security rigor with engineering velocity. - An AI-Savvy Engineer: You're energized (not intimidated) by the rapid adoption of AI-assisted development and see it as an opportunity to build novel security frameworks. - A Trust Builder: You communicate effectively across engineering, compliance, and leadership teams — authoring clear, plain-spoken technical proposals that drive alignment. - A Learn-it-all: You stay ahead of emerging threats and continuously evolve your approach — from adversarial ML to supply chain attacks on AI pipelines. - A Leader at All Levels: You're hands-on in code and architecture, but you also mentor others and help the team self-organize around measurable outcomes. BASIC QUALIFICATIONS - Bachelor's degree in a technical, engineering, or scientific field — or comparable education/experience - 3+ years in cybersecurity, with 3+ years focused on security operations or IAM - 2+ years of experience in cloud security operations, specifically AWS - 2+ years of coding experience (e.g., Python, Go, or TypeScript) with hands-on experience developing Terraform and infrastructure-as-code - Hands-on experience securing AI/ML systems, including data pipelines, model deployments, API integrations, and their security challenges PREFERRED QUALIFICATIONS - AWS Solutions Architect or Security Specialty certification - AI/ML security certifications or familiarity with adversarial machine learning threats and mitigation strategies - Experience building or integrating security controls into CI/CD pipelines and AI-assisted development workflows - Experience managing an Enterprise IdP, especially Okta, with deep understanding of OAuth 2.0 and SAML - SOC 2, PCI, or HIPAA audit/training certifications - Knowledge of low-level networking principles WHAT YOU'LL ACCOMPLISH In your first 3 months: - Audit current cloud security posture and IAM architecture across our AWS environment; build relationships with key stakeholders in Application Security, SRE, and R&D Engineering. - Assess existing AI-assisted development tooling (Claude Code, Cursor, MCP gateway) for security risks and begin developing a governance framework. In your first 6 months: - Design and implement AI-driven tools and workflows to enhance security monitoring, threat detection, incident response, and IAM governance. - Develop and enforce policies and protocols to protect AI tools and platforms from misuse, data breaches, and external threats — including secure agent sandboxing and MCP server governance. - Deliver IAM solutions enabling secure, granular access controls that enforce least privilege principles, utilizing automation and AI for privilege escalation and approvals. In your first year: - Own the security strategy for AI-enabled development and cloud infrastructure, acting as the primary subject matter expert for security enginee…