{"id":3995425,"url":"https://alion.io/job/bios-life-staff-security-platform-engineer-2","title":"Staff Security & Platform Engineer","company":{"id":4478736,"name":"Bios Life","domain":"bioslife.ai","url":"https://alion.io/company/bios-life","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":null},"role":"DevOps","role_family":"DevOps","seniority":"staff","employment_type":null,"work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Cambridge, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Amazon EKS","optional":false},{"name":"AWS","optional":false},{"name":"CI/CD","optional":false},{"name":"GCP","optional":false},{"name":"GitHub","optional":false},{"name":"Google GKE","optional":false},{"name":"IAM","optional":false},{"name":"Kubernetes","optional":false},{"name":"Linux","optional":false},{"name":"Platform Engineering","optional":false},{"name":"SOC 2","optional":false},{"name":"Terraform","optional":false},{"name":"Threat Modeling","optional":false},{"name":"TPU","optional":false}],"status":"live","first_seen_at":"2026-10-26T19:49:58Z","employer_posted_date":"2026-11-09","last_verified_at":"2026-11-10T01:05:37Z","board_verified":true,"closed_at":null,"days_open":14,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":14},"description":"HYBRID ROLE: 3-4 Days a week in the Cambridge office\nAbout BIOS Life\nBIOS Life is a Boston-based, venture-backed healthcare technology company on a mission to fundamentally change how cancer is detected, monitored, and managed. We’re building a new model of proactive, personalized cancer care that combines advanced AI, real-world clinical data, and evidence-based medicine to help patients and clinicians make better decisions throughout the cancer journey.\nOur platform brings together longitudinal patient data, predictive risk models, clinical decision support, and virtual care delivery to enable more personalized cancer screening, surveillance, and survivorship care. We’re building both the technology and clinical infrastructure to make this approach scalable, accessible, and integrated into patients’ lives.\nWe’re an early-stage company with an ambitious mission and a collaborative, multidisciplinary team spanning engineering, AI, clinical care, and operations. We’re looking for people who are excited to build something meaningful, solve complex problems, and help shape the future of cancer care.\nThe Role\nWe’re looking for a hands-on Staff Security & Platform Engineer to own and evolve the cloud infrastructure, platform engineering, and technical security foundations that support BIOS.\nYou’ll be the primary technical owner of our AWS and GCP environments, working across cloud architecture, infrastructure automation, DevSecOps, observability, reliability, and security operations. You’ll also serve as the technical counterpart to our managed IT, SOC 2 compliance, and Quality/Regulatory partners.\nAs an early-stage company, we’re looking for someone who thrives in a dynamic, collaborative environment, enjoys solving problems across disciplines, and is comfortable adapting as the company grows. You’ll work closely with Product Engineering, AI, and other teams to build secure, scalable infrastructure supporting our clinical applications, data platforms, and AI capabilities.\nThis is a highly collaborative, hybrid role based in our Cambridge office, with a minimum of three days per week onsite. We value working together in person to solve problems, share knowledge, and build strong relationships across our Engineering and AI teams. You’ll have the opportunity to shape our technical foundations, influence how we work, and contribute directly to BIOS’s mission and engineering culture as we scale.\nOur goal isn’t to create an infrastructure gatekeeper. It’s to build secure, reliable, self-service infrastructure-through automation, reusable patterns, and sensible guardrails-that enables engineering teams to move quickly without compromising security or operational discipline.\nWhat You Will Own\nCloud Infrastructure & Platform Engineering\nOwn the architecture, security, and operational management of BIOS AWS and GCP environments, including IAM, networking, secrets management, and cross-cloud infrastructure.\nEstablish and expand Infrastructure as Code (Terraform or equivalent), automation, and reusable platform patterns that make infrastructure secure, reproducible, and easy for engineering teams to use.\nEstablish best practices for provisioning, securing, monitoring, and managing cloud compute resources, including VMs, GPU/TPU infrastructure, and AI/ML workloads in GCP.\nPartner with Engineering and AI teams on infrastructure architecture for clinical, data, and AI workloads, including the design and implementation of a Trusted Research Environment (TRE).\nDrive infrastructure efficiency and cost optimization through resource monitoring, cost visibility, and appropriate operational controls.\nCI/CD, Developer Infrastructure & DevSecOps\nOwn and evolve CI/CD infrastructure and deployment mechanisms, enabling engineering teams to build, test, deploy, and roll back applications safely and independently.\nManage GitHub organization-level security and administration, including access controls, Actions/runners, secrets, branch protections, and security integrations.\nIntegrate code, dependency, container, and infrastructure security scanning into engineering workflows.\nEstablish platform-level production readiness standards and deployment guardrails while Engineering retains ownership of application development practices and service releases.\nReliability, Observability & Disaster Recovery\nOwn infrastructure observability, including logging, metrics, tracing, alerting, and operational visibility across BIOS environments.\nEstablish monitoring standards, dashboards, and operational practices that improve platform reliability, performance, and incident investigation.\nOwn infrastructure backup, disaster recovery, and business continuity capabilities, including recovery objectives (RTO/RPO), runbooks, and periodic recovery testing.\nPartner with Engineering teams to improve operational readiness and resilience as the platform scales.\nSecurity Operations & Vulnerability Management\nMaintain cloud and infrastructure security posture, proactively identifying configuration risks, vulnerabilities, and security gaps and driving remediation.\nOwn technical vulnerability management and coordinate penetration testing, security assessments, and remediation tracking in partnership with Engineering and external specialists.\nLead infrastructure and cloud-security incident preparedness and response, including investigation, containment, recovery, and post-incident improvements.\nPartner with Engineering and AI teams on threat modeling and security architecture for new platform capabilities, including mobile, web, and AI applications.\nCompliance Engineering & Audit Readiness\nImplement and maintain technical security and infrastructure controls supporting SOC 2 and other applicable regulatory and compliance requirements.\nMaintain integrations with Vanta and other assurance tools, automating technical evidence collection wherever practical.\nPartner with compliance and Quality/Regulatory leadership on audit readiness and infrastructure requirements related to the Quality Management System (QMS).\nMaintain clear architecture, security, and operational documentation to support auditability, knowledge sharing, and sustainable platform operations.\nWhat We’re Looking For\nRequired\nSignificant hands-on experience designing, operating, and securing production cloud infrastructure, with strong AWS experience and meaningful GCP experience (or deep expertise in one and demonstrated ability to work across both).\nStrong understanding of cloud IAM, service accounts, privileged access, networking, encryption, and secrets management.\nStrong Infrastructure as Code experience, preferably with Terraform, and the ability to build automation and tooling using scripting or programming languages.\nExperience designing and operating CI/CD systems, production deployment infrastructure, and GitHub organization-level administration, including Actions and security controls.\nSolid Linux, networking, and cloud infrastructure fundamentals.\nExperience with observability, production operations, incident response, and backup/recovery.\nExperience with cloud and infrastructure vulnerability management, security assessments, and operational security practices.\nStaff-level technical judgment: Ability to make architectural tradeoffs, work autonomously, influence engineering practices, and communicate technical risks clearly to engineering teams and business leadership.\nCollaborative and team-oriented: Enjoys working closely with engineers and cross-functional partners, sharing knowledge, learning from others, and solving problems together. Values in-person collaboration and contributing to a strong engineering culture.\nAdaptable and entrepreneurial: Thrives in an early-stage startup environment, embraces ambiguity, and is comfortable wearing multiple hats, balancing immediate needs with long-term architecture, and adjusting priorities as the company evolves.\nStrongly Preferred\nExperience operating infrastructure in healthcare, life sciences, fintech, or another regulated or high-assurance environment.\nExperience supporting SOC 2 or similar security audits, including compliance automation platforms such as Vanta.\nExperience coordinating independent penetration tests and security assessments.\nExperience with containerized workloads and orchestration platforms such as Kubernetes (GKE/EKS), including security, deployment, and operational practices.\nExperience building internal developer platforms, reusable infrastructure components, or self-service deployment capabilities.\nExperience operating multi-cloud environments and infrastructure supporting sensitive clinical, research, or regulated data.\nFamiliarity with GPU/TPU infrastructure, AI/ML workloads, or secure research computing environments.\nFamiliarity with regulated software development or Quality Management Systems (QMS).\nWhat Success Looks Like\nA successful Staff Security & Platform Engineer will progressively make the BIOS platform:\nMore automated and reproducible, with infrastructure managed through code rather than manual configuration.\nEasier for engineering teams to use, with secure, self-service deployment and infrastructure capabilities.\nMore observable and reliable, with clear operational visibility and actionable monitoring.\nMore resilient, with tested recovery procedures and well-defined operational practices.\nMore secure and auditable, with effective technical controls, vulnerability management, and automated compliance evidence.\nMore efficient, with appropriate resource utilization, cost visibility, and scalable infrastructure patterns.\nMore collaborative and empowering, with Engineering and AI teams working effectively together, sharing operational knowledge, and independently operating within clear infrastructure and security guardrails.\nLess dependent on individuals, through documentation, automation, and shared operational knowledge.\nThe strongest signal of success isn’t that this person personally performs every operational task. It’s that the platform becomes safer, more predictable, more self-service, and easier for engineering teams to operate within clear guardrails.","description_format":"text","description_chars":10140,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Precision Medicine","Cancer Care Centers"],"lifecycle":[{"event":"open","at":"2026-11-10T01:05:37Z"}],"visa":[{"country":"US","licensed_sponsor":true,"adverts_offering_sponsorship_24m":0,"sanctioned_now":false,"evidence":"H-1B filings in 12 months: 1","filings_12m":1,"filings_prev_12m":0,"green_card_filings_12m":0,"median_offered_wage_usd":227500,"route":null,"cap_exempt":false,"checked_at":"2026-11-09T07:32:21+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)"],"filings_for_role_12m":0}],"liveness":{"score":77,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.851,"p_room":0.9,"age_days":14,"expected_fill_days":32,"reasons":["conf:1","win:mid"],"computed_at":"2026-11-10T02:07:14Z"},"pay":null,"html_url":"https://alion.io/job/bios-life-staff-security-platform-engineer-2","json_url":"https://alion.io/job/bios-life-staff-security-platform-engineer-2.json","meta":{"generated_at":"2026-11-10T02:07:14Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":4974,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-11T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":4478736},"rest":"https://alion.io/mcp/rest/get_company?id=4478736"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fbios-life-staff-security-platform-engineer-2"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":2,"usd":0.2},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fbios-life-staff-security-platform-engineer-2"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fbios-life-staff-security-platform-engineer-2"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/bios-life-staff-security-platform-engineer-2\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fbios-life-staff-security-platform-engineer-2"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3995425}},{"tool":"search_jobs","arguments":{"company":"bioslife.ai","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3995425},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}