{"id":705607,"url":"https://alion.io/job/axiscare-senior-security-engineer","title":"Senior Security Engineer","company":{"id":669114,"name":"AxisCare","domain":"axiscare.com","url":"https://alion.io/company/axiscare","size_band":"51-200","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"BambooHR","truth_index":{"grade":"B","score":84,"open_postings":11,"ghost_share":0.273,"stale_share":0,"repost_share":0,"time_to_fill_p50_days":59,"computed_at":"2026-11-02T06:13:15Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"inferred","locations":["Waco, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":102000,"max_usd":195000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":1385},"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"AWS Bedrock","optional":false},{"name":"Docker","optional":false},{"name":"HIPAA","optional":false},{"name":"IAM","optional":false},{"name":"Kubernetes","optional":false},{"name":"LLM","optional":false},{"name":"LLM Guardrails","optional":false},{"name":"Machine Learning","optional":false},{"name":"MySQL","optional":false},{"name":"OWASP","optional":false},{"name":"OWASP Top 10","optional":false},{"name":"PHP","optional":false},{"name":"Red Teaming","optional":false},{"name":"SOC 2","optional":false},{"name":"Terraform","optional":false}],"status":"live","first_seen_at":"2026-08-14T00:00:00Z","employer_posted_date":"2026-08-14","last_verified_at":"2026-11-02T23:20:01Z","board_verified":true,"closed_at":null,"days_open":81,"trust":{"level":"ok","repost_count":0,"flags":["company_stale"],"days_open":80},"description":"Senior Security Engineer\nReports To: Director of Engineering\nSummary\nAxisCare is hiring a full-time, fully remote Senior Security Engineer to own security and compliance across our SaaS platform, the market-leading product powering the home care industry.\nThis is not a job where you'll write policies that nobody reads. You'll work directly with product engineering teams, embedded in how we build software, shaping our security posture. You'll own engineering's side of our SOC 2 Type II compliance program, lead us toward HITRUST certification, and keep our AWS infrastructure, Docker pipelines, and PHP/React codebase hardened as we move fast.\nWe're also building AI-powered products on top of Amazon Bedrock and our own machine learning models, and we use AI heavily in how we develop software. That creates new kinds of risk that most security playbooks don't cover yet. We need someone who's thinking about this already and building the guardrails that agents need to write secure software.\nHome care agencies trust us to run their business every day. Their data includes protected health information. We need someone who takes that personally.\nWhat You'll Do\nOwn AxisCare Engineering's security program as an individual contributor. Continually improve our security standards as threats evolve, strengthen the systems that enforce them, and work directly with engineers to close gaps.\nOwn engineering's share of SOC 2 Type II compliance: control design, evidence collection, audit prep, and gap remediation. Chart the path toward HITRUST certification, mapping what we already have and building what we don't.\nThreat-model our application and infrastructure. We run a PHP/React modular monolith on AWS, managed with Terraform, deployed in Docker containers, backed by MySQL in RDS. Raise the bar on this stack's security (IAM policies, VPC design, secrets management, container security, database access controls) and keep raising it as the architecture evolves.\nOwn and improve our security scanning program. Tune findings, cut false positives, and make sure scan results turn into developer action.\nAssess and mitigate the security risks inherent in our AI products: prompt injection, data leakage, model output filtering, abuse scenarios. Set guardrails for AI-assisted development workflows so the team ships faster without opening new attack surface.\nStrengthen our detection and response capabilities: logging, alerting, incident response playbooks. Coordinate penetration tests, track findings, and drive remediation.\nKeep our security policies clear, current, and short. Train developers on secure practices without burying them in process.\nWhat We're Looking For\nA builder, not just an auditor. You've built or run a security program inside a product company, not just assessed one from the outside. You can point to systems, controls, and habits you put in place that made a real difference.\nA technical peer to engineers.You read code, read Terraform, and talk to developers in their language. When you flag a vulnerability, you can explain the fix, not just the finding.\nA pragmatist.You understand that we need to ship. You weigh tradeoffs, probability, and impact, not by saying no to everything.\nA strong writer. Remote work demands it, and clear writing is clear thinking. You'll write policies, incident reports, audit narratives, and messages to engineers explaining why something matters. Clarity counts.\nAn AI-aware security thinker. You're already wrestling with what AI means for security: new attack surfaces, new tooling, new ways that development workflows create risk.\nExperience required:\n5+ years in application security, infrastructure security, or security engineering at a SaaS company\nHands-on experience with AWS security (IAM, VPC, Security Groups, KMS, CloudTrail, GuardDuty)\nExperience owning or heavily contributing to the engineering side of SOC 2 Type II compliance\nFamiliarity with container security (Docker, Kubernetes) and infrastructure-as-code (Terraform)\nSolid grasp of web application security fundamentals (OWASP Top 10, secure SDLC)\nExperience securing AI/ML systems or LLM-powered products\nConcrete examples of how you've used AI to improve your own security work: automating compliance tasks, speeding up threat analysis, building detection rules faster, or something we haven't thought of\nAble to work remotely from the Eastern, Central, or Mountain time zones\nQualified to work in the United States or Canada\nWhat We'd Be Excited to Find\nExperience building or maintaining HIPAA-compliant or HITRUST-certified environments\nCISSP, OSCP, or AWS Security Specialty certification\nBackground in penetration testing or red team work\nWorking Conditions\nManual dexterity required to use desktop computer and peripherals.\nCompensation and Equipment\nSalary (TBD based on job experience and skill level)\nMedical insurance is covered in full for the employee (Medical, Dental, and Vision)\nCompany will provide laptop and other needed computer equipment\nHow to Apply\nApply with a brief resume and either a written or video cover letter.\nWe review the cover letter before anything else in your application, so this really matters. This is your single biggest opportunity to improve your chances, and video submissions go right to the front of the line.\nPrompt: How has AI changed the security landscape you work in: what's gotten easier, what's gotten harder, and how have you adapted? Tell us about a security program, control, or hard problem you're proud of owning. Tell us why this position is the one you've been hoping to find.\nWritten: No more than 600 words. We're looking for clarity of thought and strong communication. Use AI if you want, but don't send slop.\nVideo: 1-2 minutes, linked in the \"Website, Blog, or Portfolio\" section of your application. Doesn't need to be highly produced. We care about how you think and communicate.\nWe strongly encourage candidates from all backgrounds and every walk of life to apply. Every person on our team brings their own unique perspective, and it's what makes our products better and our work more rewarding. We're eager to support you so that you can ship work you're proud of.\nCandidates only. No recruiters, please.\nAbout AxisCare\nAccording to Pew Research, roughly 10,000 baby boomers turn 65 every day, and the American Society on Aging calculated that an American has a 70% chance of needing help with activities of daily living such as dressing, bathing, hygiene, etc. This has led to an unprecedented increase in Home Care agencies in the U.S. and abroad who strive to help those who have difficulty helping themselves, specifically offering non-medical (also referred to as non-skilled) services to seniors in their homes.\nAxisCare was started in 2011 by industry leaders to help meet the demand for a more user-friendly and mobile-compatible solution. Our product is a web-based management platform that helps agencies manage CRM and marketing, Caregiver/Client scheduling, billing, payroll and much more. Headquartered in Waco, TX, AxisCare has clients in all 50 states as well as 6 other countries. We are a fast-growing company seeking high-performing individuals looking for a fast-paced, autonomous working environment.","description_format":"text","description_chars":7235,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Health insurance"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":[],"lifecycle":[{"event":"open","at":"2026-09-11T03:51:36Z"}],"visa":[],"liveness":{"score":32,"band":"fade","label":"Fading","p_open":1,"p_active":0.717,"p_room":0.44,"age_days":80,"expected_fill_days":59,"reasons":["conf:4","win:tail","crowd:"],"computed_at":"2026-11-02T06:13:15Z"},"pay":null,"html_url":"https://alion.io/job/axiscare-senior-security-engineer","json_url":"https://alion.io/job/axiscare-senior-security-engineer.json","meta":{"generated_at":"2026-11-03T01:43:28Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":2309,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-04T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":669114},"rest":"https://alion.io/mcp/rest/get_company?id=669114"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Faxiscare-senior-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Faxiscare-senior-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Faxiscare-senior-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/axiscare-senior-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Faxiscare-senior-security-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":705607}},{"tool":"search_jobs","arguments":{"company":"axiscare.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":705607},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}