{"id":16259,"url":"https://alion.io/job/hinge-health-lead-security-engineer","title":"Lead Security Engineer","company":{"id":4924,"name":"Hinge Health","domain":"hingehealth.com","url":"https://alion.io/company/hinge-health","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Ashby","truth_index":{"grade":"B","score":74,"open_postings":8,"ghost_share":0,"stale_share":0.75,"repost_share":0.125,"time_to_fill_p50_days":63,"computed_at":"2026-10-29T05:49:05Z"}},"role":"Security","role_family":"Security","seniority":"lead","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["New York, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":191200,"max":286800,"currency":"USD","period":"year","gross":null,"usd_annual":286800},"salary_estimate":null,"experience_years_min":3,"visa_sponsorship":false,"relocation_package":false,"has_equity":true,"technologies":[{"name":"AWS","optional":false},{"name":"CI/CD","optional":false},{"name":"Go","optional":false},{"name":"IAM","optional":false},{"name":"Model Context Protocol","optional":false},{"name":"Python","optional":false},{"name":"Terraform","optional":false},{"name":"TypeScript","optional":false},{"name":"Claude Code","optional":true},{"name":"Cursor","optional":true},{"name":"HIPAA","optional":true},{"name":"Least Privilege","optional":true},{"name":"Machine Learning","optional":true},{"name":"Okta","optional":true},{"name":"SOC 2","optional":true}],"status":"live","first_seen_at":"2026-06-28T19:54:01Z","employer_posted_date":"2026-06-28","last_verified_at":"2026-10-29T11:23:16Z","board_verified":true,"closed_at":null,"days_open":122,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":122},"description":"The Opportunity\nJoin the team securing the platform that helps millions of people move beyond musculoskeletal pain. As Hinge Health's engineering organization embraces AI-assisted development - including AI-powered code generation, automated PR review workflows, agent sandboxing, and MCP gateway integrations - we need a Lead Security Engineer who will build the security guardrails, tooling, and standards that ensure we ship with confidence. You'll sit at the critical intersection of cloud security, AI-enabled engineering, and identity & access management, partnering closely with Application Security, SRE, and R&D Engineering to design and enforce security-by-design principles across our AWS environment, CI/CD pipelines, and developer tooling. This is your chance to make a real impact on the lives of millions by driving advancements in healthcare security - ensuring utmost compliance and privacy while enabling engineers to move fast and safely.\nCandidates must be within commuting distance to New York City\nWho You Are\nA Security-First Thinker: You instinctively design systems that are secure by default, and you know how to balance security rigor with engineering velocity.\n\nAn AI-Savvy Engineer: You're energized (not intimidated) by the rapid adoption of AI-assisted development and see it as an opportunity to build novel security frameworks.\n\nA Trust Builder: You communicate effectively across engineering, compliance, and leadership teams - authoring clear, plain-spoken technical proposals that drive alignment.\n\nA Learn-it-all: You stay ahead of emerging threats and continuously evolve your approach - from adversarial ML to supply chain attacks on AI pipelines.\n\nA Leader at All Levels: You're hands-on in code and architecture, but you also mentor others and help the team self-organize around measurable outcomes.\n\nBasic Qualifications\nBachelor's degree in a technical, engineering, or scientific field - or comparable education/experience\n\n3+ years in cybersecurity, with 3+ years focused on security operations or IAM\n\n2+ years of experience in cloud security operations, specifically AWS\n\n2+ years of coding experience (e.g., Python, Go, or TypeScript) with hands-on experience developing Terraform and infrastructure-as-code\n\nHands-on experience securing AI/ML systems, including data pipelines, model deployments, API integrations, and their security challenges\n\nPreferred Qualifications\nAWS Solutions Architect or Security Specialty certification\n\nAI/ML security certifications or familiarity with adversarial machine learning threats and mitigation strategies\n\nExperience building or integrating security controls into CI/CD pipelines and AI-assisted development workflows\n\nExperience managing an Enterprise IdP, especially Okta, with deep understanding of OAuth 2.0 and SAML\n\nSOC 2, PCI, or HIPAA audit/training certifications\n\nKnowledge of low-level networking principles\n\nWhat You'll Accomplish\nIn your first 3 months:\nAudit current cloud security posture and IAM architecture across our AWS environment; build relationships with key stakeholders in Application Security, SRE, and R&D Engineering.\n\nAssess existing AI-assisted development tooling (Claude Code, Cursor, MCP gateway) for security risks and begin developing a governance framework.\n\nIn your first 6 months:\nDesign and implement AI-driven tools and workflows to enhance security monitoring, threat detection, incident response, and IAM governance.\n\nDevelop and enforce policies and protocols to protect AI tools and platforms from misuse, data breaches, and external threats - including secure agent sandboxing and MCP server governance.\n\nDeliver IAM solutions enabling secure, granular access controls that enforce least privilege principles, utilizing automation and AI for privilege escalation and approvals.\n\nIn your first year:\nOwn the security strategy for AI-enabled development and cloud infrastructure, acting as the primary subject matter expert for security engineering across the organization.\n\nEnsure all compliance regulations - including HIPAA, privacy, and relevant security frameworks - are met for new services, AI tooling, and infrastructure.\n\nDevelop and drive cybersecurity initiatives related to incident response, threat intelligence, vulnerability management, and monitoring tools.\n\nMentor team members in adopting new security tools and processes; educate the broader organization through knowledge-sharing sessions and author clear technical proposals with measurable security OKRs.\n\nAbout Hinge Health\nAt Hinge Health, we’re using technology to scale and automate the delivery of healthcare, starting with musculoskeletal (MSK) conditions, which affect over 1.7 billion people worldwide. Our AI-powered, human-centered care model spans MSK, pelvic health, gastrointestinal (GI) and migraine care. With over 60 partnerships with health plans, PBMs and other ecosystem partners, Hinge Health is available to over 25 million people across more than 2,900 employers. The company is headquartered in San Francisco with additional offices in Montreal and Bangalore. Learn more at hingehealth.com.\nWhat You’ll Love About Us\nInclusive healthcare and benefits: On top of comprehensive medical, dental, and vision coverage, we offer employees and their family members help with gender-affirming care, tools for family and fertility planning, and travel reimbursements if healthcare isn’t available where you live.\n\nPlanning for the future: Start saving for the future with our traditional or Roth 401k retirement plan options which include a 2% company match.\n\nModern life stipends: Manage your own learning and development.\n\nGrow with us: Grow with us through discounted company stock through our ESPP with easy payroll deductions.\n\nCulture & Engagement\nHinge Health is an equal opportunity employer and prohibits discrimination and harassment of any kind. We make employment decisions without regards to race, color, religion, sex, sexual orientation, gender identity, national origin, age, veteran status, disability status, pregnancy, or any other basis protected by federal, state or local law. We also consider qualified applicants regardless of criminal histories, consistent with legal requirements. We provide reasonable accommodations for candidates with disabilities. If you feel you need assistance or an accommodation due to a disability, let us know by reaching out to your recruiter.\nBy submitting your application you are acknowledging we are using your personal data as outlined in the personnel and candidate privacy policy.\nBeware of Phishing Attempts: We've noticed an increase in phishing where fraudsters impersonate employees and send fake job offers to steal sensitive information. We'll never ask for financial details during the hiring process and only use \"@hingehealth.com \" emails. If you receive a suspicious offer, stop communication and report it to the US FBI Internet Crime Complaint Center. To verify an email from our recruiting team, forward it to .","description_format":"text","description_chars":7027,"description_truncated":false,"requirements":{"experience_years_min":3,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["401k plan","Retirement plans"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Telemedicine & Virtual Care","Physiotherapy & Rehabilitation"],"lifecycle":[{"event":"open","at":"2026-06-28T19:54:01Z"}],"visa":[{"country":"US","licensed_sponsor":true,"evidence":"H-1B filings in 12 months: 22","filings_12m":22,"filings_prev_12m":18,"green_card_filings_12m":0,"median_offered_wage_usd":187500,"route":null,"cap_exempt":false,"checked_at":"2026-10-15T11:24:14+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)","US Department of Labor: PERM disclosure data (green cards)"],"filings_for_role_12m":2}],"liveness":{"score":22,"band":"cold","label":"Long shot","p_open":1,"p_active":0.613,"p_room":0.36,"age_days":122,"expected_fill_days":63,"reasons":["conf:2","velocity","win:tail","crowd:"],"computed_at":"2026-10-29T05:49:05Z"},"pay":{"stated_usd_annual":286800,"is_top_pay":true},"html_url":"https://alion.io/job/hinge-health-lead-security-engineer","json_url":"https://alion.io/job/hinge-health-lead-security-engineer.json","meta":{"generated_at":"2026-10-29T13:42:39Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":20572,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-30T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":4924},"rest":"https://alion.io/mcp/rest/get_company?id=4924"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fhinge-health-lead-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fhinge-health-lead-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fhinge-health-lead-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/hinge-health-lead-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fhinge-health-lead-security-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":16259}},{"tool":"search_jobs","arguments":{"company":"hingehealth.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":16259},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}