Senior Security Engineer at AIOS — Remote, $150k–$250k/yr inc equity

AIOS is building a full-stack AI doctor and is hiring a Senior Security Engineer to own identity, endpoint security, logging and detection, and IT security operations. The role partners with engineering on cloud security and responds to security incidents.

Responsibilities:

• Identity: You own the identity provider and access model: SSO and SCIM, MFA policy, conditional and device-aware access, and joiner, mover and leaver for everyone who needs access
• Fleet: You own device management across the fleet: enrollment, encryption, patching, configuration baselines, and lock and wipe at offboarding
• EDR: You own EDR and work endpoint incidents from alert to containment
• Logging and detection: You decide what we collect, write and tune detections, and automate the response
• Cloud ownership: You work with engineering on cloud identity, logging and access
• Automation: You build the scripts and AI agents that take repeatable work off people
• IT operations: You own onboarding and offboarding end to end, from laptop and accounts on day one to full access removal on the last day. You manage the vendors and MSPs that handle parts of this work, hold them to a high bar, and automate the rest so it runs without a ticket. You’re the escalation point for IT issues across the team
• Incident response: You’re a first responder for security incidents

Requirements:

• You have 6+ years in security engineering, with hands-on depth across identity, endpoint and detection
• You've run an identity provider hands-on: SSO and SCIM, conditional access, and device-aware policies
• You've run MDM/UEM at scale, including enrollment, encryption and remote wipe
• You've run an EDR and worked incidents from alert to containment
• You've written detections
• You can describe one, what it caught, and how you tuned out the noise
• You know how attacks work because you've done them: red teaming, pentesting, bug bounties, CTFs or similar
• You script and automate (Python, bash, etc.) and already use AI agents to do more of your work
• You know enough cloud security (AWS, GCP or Azure) to partner with engineers on identity, logging and access
• You've owned onboarding, offboarding and IT operations for a distributed team, including managing outside vendors or MSPs and holding them to clear standards
• You can explain risk clearly to employees, engineers and executives
• You've worked in healthcare or another regulated environment (HIPAA, GDPR, PCI)
• You've owned an identity or device program through fast growth
• You've secured a distributed, multi-country workforce
• You've shipped tools, detections, write-ups, talks or CVEs