{"id":766897,"url":"https://alion.io/job/agelessrx-senior-security-engineer","title":"Senior Security Engineer","company":{"id":670047,"name":"AgelessRx","domain":"agelessrx.com","url":"https://alion.io/company/agelessrx","size_band":"11-50","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Rippling","truth_index":null},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"board_field","remote_working_hours":null,"hiring_geo_confidence":"structured","locations":[],"countries":[],"hiring_countries":["US"],"hiring_countries_total":1,"salary":null,"salary_estimate":{"min_usd":121000,"max_usd":217000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":390},"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"HIPAA","optional":false},{"name":"IAM","optional":false},{"name":"Least Privilege","optional":false},{"name":"LLM","optional":false},{"name":"Threat Modeling","optional":false},{"name":"Docker","optional":true},{"name":"FHIR","optional":true},{"name":"HL7","optional":true},{"name":"NIST AI RMF","optional":true},{"name":"OCR","optional":true}],"status":"live","first_seen_at":"2026-09-11T15:15:51Z","employer_posted_date":"2026-09-11","last_verified_at":"2026-11-08T04:55:24Z","board_verified":true,"closed_at":null,"days_open":57,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":57},"description":"About AgelessRx\nAgelessRx is a first-of-its-kind, longevity-focused telehealth platform with an e-commerce component. Our mission is to collectively give people millions of extra healthy years, so everyone can enjoy more of what they love in a world where people are empowered to live as long as they want. We believe aging should no longer be treated as a dreadful inevitability, but instead, as a puzzle that can be solved, a fight that can be fought - just as a disease with a cure. Through our free-to-use platform, we offer trusted, data-driven longevity solutions and scientifically backed prescription therapies to help safely lower the risk of age-related diseases.\nAbout the role\nAgelessRx is seeking a hands-on, highly capable Senior Security Engineer to serve as the technical owner of information security across our growing telehealth environment. As a healthcare company, protected health information (PHI) flows through much of what we build and operate, making security, privacy, and regulatory compliance fundamental to our products, infrastructure, and internal systems.\nThis is a broad security engineering role with meaningful ownership across application and product security, cloud infrastructure, identity and access management, vulnerability management, security operations, and technical security governance. This person will help define AgelessRx's security roadmap, build and operate the recurring programs that keep the company secure and audit-ready, and partner directly with Engineering to identify and mitigate risk throughout the development lifecycle.\nThe Senior Security Engineer will also serve as a key technical partner in AgelessRx's approach to AI security and governance. As AI becomes increasingly embedded across our products and internal operations, this person will help ensure AI tools and systems are deployed responsibly, securely, and in accordance with AgelessRx's obligations as a healthcare organization.\nThis is not a compliance-only role. We are looking for someone who can move comfortably between strategy and execution: reviewing a sensitive code path or investigating a vulnerability one day, establishing an access-control standard or evaluating an AI vendor the next, and translating technical and regulatory risk into clear recommendations for leadership.\nWhat you'll do\nSecurity Program & Risk Management\nOwn and continuously evolve AgelessRx's technical security roadmap, prioritizing initiatives based on risk, business impact, regulatory requirements, and company growth.\nEstablish and operate repeatable security programs, controls, reporting, and documentation across the organization.\nConduct and document security and architecture reviews for new systems, vendors, integrations, and significant technology changes.\nMaintain visibility into security risks, vulnerabilities, remediation priorities, owners, and timelines.\nConduct and support security risk assessments, including those required under the HIPAA Security Rule.\nMaintain audit-ready evidence and documentation supporting AgelessRx's technical security controls.\nPlan and facilitate recurring security and incident-response exercises, including scenarios involving PHI exposure or other material security events.\nProvide leadership with a clear, actionable view of the company's security posture, priorities, open risks, and remediation progress.\nIdentity, Cloud & Infrastructure Security\nDefine security requirements and technical standards for identity, authentication, authorization, and privileged access across AgelessRx.\nPartner with the IT Administrator to implement and maintain SSO, MFA, privileged access management, endpoint controls, and other workforce security requirements.\nAssess and strengthen cloud infrastructure, IAM configurations, external attack surfaces, and administrative access.\nOwn the vulnerability-management program across cloud infrastructure, endpoints, applications, and other relevant technology, including prioritization and remediation SLAs.\nMaintain and strengthen email security and authentication controls, including DMARC, SPF, and DKIM.\nPartner with IT on recurring access reviews and ensure identified exceptions or inappropriate access are remediated.\nEstablish security requirements for company devices and endpoints while partnering with IT on implementation and ongoing administration.\nApplication & Product Security\nEmbed security into AgelessRx's software development lifecycle and engineering practices.\nConduct security reviews of architecture, authentication flows, sensitive data handling, payments, and other security-sensitive areas of the product.\nDevelop threat models for new products, features, services, and integrations, particularly those involving PHI or other sensitive information.\nDeploy, configure, and continuously improve application-security tooling, including SAST, SCA, dependency scanning, and software supply-chain controls.\nEstablish clear processes for reviewing, prioritizing, and remediating application-security findings.\nDevelop and maintain secure development standards, guardrails, and practical guidance for engineers.\nScope and coordinate third-party penetration testing and drive identified findings through remediation and closure.\nEstablish and operate an appropriate vulnerability disclosure and triage process.\nPartner with Engineering early in the development process so security risks are identified before they reach production without unnecessarily slowing engineering velocity.\nHealthcare Security & Compliance\nMaintain technical security documentation and evidence required to demonstrate the effectiveness of AgelessRx's safeguards.\nSupport HIPAA risk analyses, audits, investigations, incident response, and other regulatory or compliance activities requiring technical security expertise.\nPartner with Legal, Compliance, HR, Engineering, and other stakeholders to ensure security requirements are appropriately incorporated into company systems and processes.\nEvaluate security considerations associated with vendors and partners handling PHI or other sensitive company information, including technical security posture and BAA-related requirements.\nMonitor changes to security and technology requirements affecting AgelessRx and help translate them into actionable technical controls.\nAI Security & Governance\nServe as the technical security owner for AgelessRx's AI governance program in partnership with Legal, Compliance, HR, Engineering, Product, and other stakeholders.\nMaintain visibility into AI systems and tools that access PHI, patient information, proprietary company information, or other sensitive data.\nEstablish and maintain technical security requirements for the use of AI across AgelessRx, including controls designed to prevent PHI or sensitive information from reaching unapproved AI systems.\nConduct security and risk assessments of AI tools and vendors before deployment, including data flows, retention, model-training practices, access controls, subprocessors, and other relevant risks.\nPartner with Legal and Compliance on AI vendor requirements, including BAAs and AI-specific data protection considerations.\nExtend security review and threat modeling to AI-enabled products and features, including risks such as prompt injection, inappropriate model access, data leakage, output handling, and exposure of PHI through prompts, logs, or model outputs.\nPartner with Legal and Compliance to monitor evolving AI requirements affecting healthcare, patient-facing technology, privacy, accessibility, and security and translate applicable requirements into technical controls.\nHelp align AgelessRx's AI risk-management practices with an appropriate recognized framework and maintain supporting evidence.\nReview and implement approved MCPs and other AI-related integrations in accordance with company security and technology policies.\nPartner with HR, Compliance, and other stakeholders on the implementation and enforcement of company policies governing employee use of AI tools.\nQualifications\n5+ years of experience in security engineering, cybersecurity, or a related technical security role.\nHands-on depth across at least two major security domains, such as application/product security, cloud and identity security, vulnerability management, security operations, or security governance.\nExperience securing environments subject to HIPAA or comparable regulatory requirements and translating regulatory obligations into technical controls.\nStrong working knowledge of at least one major cloud provider and associated IAM and security practices.\nStrong understanding of identity and access management, including SSO, SAML/OIDC, MFA, privileged access, and least-privilege principles.\nExperience with application-security tooling and practices, including SAST, SCA, dependency management, threat modeling, and secure software development.\nExperience establishing or operating recurring security programs such as vulnerability management, access reviews, penetration testing, security assessments, or incident-response exercises.\nExperience assessing and prioritizing vulnerabilities based on exploitability, business impact, sensitive-data exposure, and practical risk - not simply severity scores.\nWorking understanding of AI/LLM security risks and the challenges associated with governing AI systems in regulated environments.\nStrong written communication and documentation skills, particularly for audiences that may include engineers, executives, auditors, regulators, and non-technical stakeholders.\nAbility to operate autonomously and establish structure in an environment where security processes and infrastructure are still evolving.\nPREFERRED QUALIFICATIONS\nDirect experience conducting HIPAA Security Rule risk analyses, preparing for OCR audits, or supporting healthcare security investigations or breach response.\nExperience securing healthcare technology, telehealth platforms, EHR integrations, or HL7/FHIR-based systems.\nExperience building or significantly maturing a security program as an early or first dedicated security hire.\nExperience implementing AI governance or AI risk-management programs, including familiarity with NIST AI RMF, ISO/IEC 42001, or similar frameworks.\nExperience evaluating AI vendors or systems that process PHI or other regulated data.\nFamiliarity with emerging healthcare and AI regulatory requirements.\nExperience with containerization platforms such as Docker.\nRelevant security certifications such as OSCP, HCISPP, CISSP, or cloud-security certifications are valued but not required.","description_format":"text","description_chars":10583,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Telemedicine & Virtual Care","Primary Care & Medical Centers"],"lifecycle":[{"event":"open","at":"2026-09-11T20:21:40Z"}],"visa":[],"liveness":{"score":11,"band":"cold","label":"Long shot","p_open":1,"p_active":0.317,"p_room":0.35,"age_days":57,"expected_fill_days":7,"reasons":["conf:0","win:tail"],"computed_at":"2026-11-08T05:47:12Z"},"pay":null,"html_url":"https://alion.io/job/agelessrx-senior-security-engineer","json_url":"https://alion.io/job/agelessrx-senior-security-engineer.json","meta":{"generated_at":"2026-11-08T07:52:15Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":17114,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-09T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":670047},"rest":"https://alion.io/mcp/rest/get_company?id=670047"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fagelessrx-senior-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fagelessrx-senior-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fagelessrx-senior-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/agelessrx-senior-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fagelessrx-senior-security-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":766897}},{"tool":"search_jobs","arguments":{"company":"agelessrx.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":766897},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}