Senior IT/Security Engineer – AI-native

Incredible Health

IT/Security Engineer managing compliance and security practices for Incredible Health, a healthcare career marketplace. Driving audits, managing security tests, and ensuring vendor compliance.

Posted 7/17/2026full-timeRemote • Alabama, Arizona, California, Colorado, Connecticut, District of Columbia, Florida, Idaho, Illinois, Iowa, Maryland, Massachusetts, Minnesota, Mississippi, Missouri, Montana, Nevada, New Jersey, New York, North Carolina, Ohio, Oregon, Pennsylvania, South Carolina, Tennessee, Texas, Utah, Virginia, Washington, West Virginia • 🇺🇸 United StatesSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in managing compliance programs, particularly SOC 2 Type 2 audits, and possesses strong cloud security skills. Capable of evaluating AI security and effectively communicating complex security concepts to diverse stakeholders.

Highest-signal resume keywords

SOC 2 Type 2 Audit ManagementCloud Security ExpertiseAI Security EvaluationIAM, EDR/XDR, SIEM, CSPM, MDM DeploymentVendor Management and Procurement

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

SOC 2 Type 2 AuditCloud SecurityAI Risk AssessmentAccess ReviewsIncident ResponseSecurity Questionnaire CompletionBCDR TestingRemediation ManagementSecurity Policy EnforcementSecurity Training

Soft Skills

CommunicationCollaborationProblem-SolvingLeadershipEducation

Tools & Technologies

AWSHerokuCloudflareGoogle WorkspaceGitHubVantaRippling

Industry Keywords

Healthcare SecurityCompliance ProgramSecurity Incident ManagementPhishing DefenseAI Threat Landscape

Tech Stack

Tools & technologies

AWSCloudHeroku

About the role

Key responsibilities & impact

Owning our compliance program end to end: driving our annual SOC 2 Type 2 audits from evidence collection through auditor walkthroughs, and running Vanta as our governance home base year-round.
Completing security questionnaires, addendums, and AI risk assessments for the IT and security teams at our hospital clients — and making sure they understand we're doing the right thing. (Health systems ask great, hard questions. You'll have great answers.)
Running real BCDR tests and treating them like live incidents to find the gaps before the gaps find us.
Coordinating annual pen tests and driving remediation of findings within SLA.
Managing security across our stack: AWS, Heroku, Cloudflare, Google Workspace, GitHub, and our communication tools.
Administering our laptop fleet for a fully remote team — imaging, shipping, MDM enrollment, inventory, and end-of-life — so every machine is encrypted, managed, and remotely wipeable.
Running access reviews and enforcing least privilege: pruning admin lists, enforcing SSO and 2FA, and tuning password policies.
Ensuring new employees get access to everything they need on day one, and departing ones are locked out the same day — partnering with HR and Finance on a tight onboarding/offboarding loop through Rippling and Google.
Evaluating and securing AI tooling — from how our team uses Claude and MCP servers to partnering with engineering on customer questions about AI risk, bias testing, and model governance.
Doing vendor management and procurement reviews, and finding savings while you're at it.
Staying on top of the rapidly evolving AI threat landscape and adapting our defenses and team training as fast as the attackers adapt theirs.
Playing professor and educating our team on everything security.
Advising leadership on security matters during project planning, and working with our full stack engineers to ship improvements you identify.
Being the savior in the event of a security incident — leading response, analysis, and the write-up afterward.
Supporting co-workers when they manage to put their computers in a bad place. (They should enjoy talking to you, and you to them!)

Requirements

What you’ll need

You've already been doing this kind of thing for at least five years.
You've owned a SOC 2 Type 2 audit cycle yourself — wrangled the evidence, sat with the auditors, and come out the other side with a clean report.
Cloud security is one of your strong suits.
Extra points if you've locked down AWS before, and double extra if you've herded Cloudflare too.
You've deployed and administered tools for all the big acronyms: IAM, EDR/XDR, SIEM, CSPM, MDM, and GRC platforms like Vanta.
You've answered security questionnaires from large enterprise or healthcare customers and know how to turn a 200-row spreadsheet into a closed deal.
You have informed opinions about AI security — securing internal AI tools, evaluating AI vendors, and translating technical AI work into answers enterprise customers trust.
You have scaled security to fight off the ever-increasing phishers and breachers in a fast and high-tech environment.

Benefits

Comp & perks

We offer a competitive, market based salary aligned with your skills and experience
Our comprehensive benefits package covers medical, dental and vision coverage with shared premiums
Our company sponsored 401(k) allows you to save for retirement
Commission and/or equity may be offered based on the position
Unlimited vacation, so take a break when you need it!
We have a generous family leave policy so that you can spend time bonding with new additions to your family.
We welcome candidates with backgrounds that are commonly underrepresented in our industries.
We deeply value culture, community, and camaraderie amongst our team - we strive to create a work environment that lets you have fun and celebrate (team events and trivia galore!).