{"id":3853895,"url":"https://alion.io/job/pathai-senior-security-engineer","title":"Senior Security Engineer","company":{"id":38957,"name":"Pathai","domain":"pathai.com","url":"https://alion.io/company/pathai","size_band":"201-500","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":null},"role":"Security","role_family":"Security","seniority":"senior","employment_type":null,"work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Boston, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":127500,"max":195500,"currency":"USD","period":"year","gross":null,"usd_annual":195500},"salary_estimate":null,"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"CI/CD","optional":false},{"name":"CWE","optional":false},{"name":"DICOM","optional":false},{"name":"Docker","optional":false},{"name":"FHIR","optional":false},{"name":"GitLab","optional":false},{"name":"GitLab CI","optional":false},{"name":"HIPAA","optional":false},{"name":"HL7","optional":false},{"name":"IAM","optional":false},{"name":"IEC 62304","optional":false},{"name":"ISO 13485","optional":false},{"name":"ISO 27001","optional":false},{"name":"JavaScript","optional":false},{"name":"Jira","optional":false},{"name":"Kubernetes","optional":false},{"name":"Machine Learning","optional":false},{"name":"OWASP Top 10","optional":false},{"name":"pre-commit","optional":false},{"name":"Python","optional":false},{"name":"SOC 2","optional":false},{"name":"Terraform","optional":false},{"name":"Threat Modeling","optional":false},{"name":"Amazon EKS","optional":true},{"name":"Amazon S3","optional":true},{"name":"Apache Kafka","optional":true},{"name":"Cloudflare","optional":true},{"name":"Datadog","optional":true},{"name":"Django","optional":true},{"name":"FastAPI","optional":true},{"name":"GCP","optional":true},{"name":"PostgreSQL","optional":true},{"name":"Vue.js","optional":true}],"status":"live","first_seen_at":"2026-11-06T04:28:23Z","employer_posted_date":"2026-11-06","last_verified_at":"2026-11-07T03:16:40Z","board_verified":true,"closed_at":null,"days_open":0,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":0},"description":"Location: Boston, MA (Hybrid) / Remote · Department: Engineering\nPathAI's mission is to improve patient outcomes with AI-powered pathology.\nOur platform promises substantial improvements to the accuracy of diagnosis and the efficacy of treatment of diseases like cancer, leveraging modern approaches in machine learning and artificial intelligence. We have a track record of success in deploying AI algorithms for histopathology in translational research, pathology labs and clinical trials. Rigorous science and careful analysis is critical to the success of everything we do. Our team, composed of diverse employees with a wide range of backgrounds and experiences, is passionate about solving challenging problems and making a huge impact on patient outcomes.\nAt PathAI, we are constantly evaluating our tech stack and our current tools consist of:\nLanguages & Frameworks: Python, JavaScript, Django / DRF, FastAPI, Vue\n Platform: EKS (Kubernetes), S3, RDS / PostgreSQL, SQS, MSK (Kafka)\n Tooling: GitLab CI/CD, Terraform, Docker, Datadog, Orca, AWS GuardDuty, Cloudflare, GCP\nThe Opportunity\nWe're looking for a Senior Security Engineer who thinks like a software engineer. You will make secure development the easy path at PathAI by embedding security into how our engineers design, build, and ship software, and by building the tools and automation that help them do their jobs securely without slowing down. Your goal is not just to find vulnerabilities, but to actively reduce the friction engineers experience when identifying, prioritizing, and resolving cybersecurity issues.\nYou will champion secure coding practices across our Python and JavaScript codebases, partnering with engineering teams through design reviews, threat modeling, and code review.\nYou will design and build internal tools, automation, and paved-road patterns (e.g., secure libraries, CI/CD guardrails, pre-commit checks, self-service workflows) that help engineers write and ship secure software by default.\nYou will own and continuously improve security tooling in the SDLC, including SAST, DAST, SCA/dependency scanning, secrets detection, container and IaC scanning, and tune it to maximize signal and minimize noise.\nYou will streamline how cybersecurity issues are triaged, tracked, and remediated, making findings actionable, well-prioritized, and integrated into the tools engineers already use (GitLab, Orca, AWS GuardDuty, Jira, Bugbounty).\nYou will collaborate with product, infrastructure, machine learning, and IT teams to secure our cloud-native SaaS platform on AWS and Kubernetes.\nYou will drive and uphold high engineering standards, bringing consistency to the codebases and pipelines you encounter and ensuring security controls are adequately reviewed, tested, and integrated.\nYou will foster a culture of continuous learning by mentoring teammates, delivering secure coding guidance and training, and sharing technical knowledge.\nYou will contribute to a SaaS platform ensuring reliability, data integrity, protection of sensitive health data, and compliance with industry standards.\nYou will collaborate with clinical, QA, and regulatory teams to ensure security activities meet validation expectations and support audits and inspection readiness.\nWho You Are:\n(Required)\nYou have a BS in Computer Science, Software Engineering, Cybersecurity or closely related technical field.\nYou have 5+ years of full life cycle development and/or application security engineering experience.\nYou have a strong, hands-on understanding of secure coding practices and common vulnerability classes (e.g., OWASP Top 10, CWE), and can explain both the risk and the fix to developers.\nYou have demonstrated experience building tools and automation that improve developer workflows, ideally in Python.\nYou have demonstrated experience integrating security tooling (SAST, DAST, SCA, secrets scanning, container scanning) into CI/CD pipelines.\nYou have demonstrated the ability to take on complex tasks, learn quickly and work in a proactive manner.\nYou have a demonstrated ability to collaborate with a distributed team and to work autonomously on projects; You have demonstrated problem-solving skills and the ability to work in a fast-paced, agile environment.\nYou have strong interpersonal and communication skills, with the ability to attend client-facing meetings and explain technical concepts to non-experts.\nYou have demonstrated cloud platform experience (AWS).\nPreferred:\nYou have experience managing cybersecurity and risk in a controlled or regulated environment (e.g., FDA-regulated medical device software, IEC 62304, ISO 13485, ISO 27001, NIST, SOC 2, HIPAA).\nYou have an advanced degree or relevant security certification (e.g., OSCP, GWAPT, CSSLP, CISSP).\nYou have experience working in the healthtech industry, including working with HL7, HL7 FHIR, or DICOM.\nYou have experience with threat modeling, vulnerability management programs, and risk-based prioritization of findings.\nYou have hands-on experience with CI/CD tools, e.g. GitLab CI.\nYou have demonstrated knowledge of containerization technologies like Docker and container orchestration tools like Kubernetes, including securing them.\nYou have knowledge of some IaC framework (e.g., Terraform) and experience applying policy-as-code or IaC security scanning.\nYou have experience with cloud security tooling and practices (IAM, network segmentation, logging and monitoring, CSPM).\nYou have excellent organizational skills and the ability to prioritize and manage multiple projects efficiently.\nThis is either a remote position or a hybrid position based in Boston, MA. Relocation benefits are not available for this position.\nThe expected salary range for this position based on the primary location Boston, MA is $127,500 - $195,500. Actual pay will be determined based on experience, qualifications, geographic location, and other job-related factors permitted by law.\nPathAI is an equal opportunity employer. It is our policy and practice to employ, promote, and otherwise treat any and all employees and applicants on the basis of merit, qualifications, and competence. The company's policy prohibits unlawful discrimination, including but not limited to, discrimination on the basis of Protected Veteran status, individuals with disabilities status, and consistent with all federal, state, or local laws.","description_format":"text","description_chars":6370,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["Continuous learning"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":true,"industries":["Application Security","Medical AI","Medical Laboratories"],"lifecycle":[{"event":"open","at":"2026-11-06T05:04:36Z"}],"visa":[{"country":"US","licensed_sponsor":true,"adverts_offering_sponsorship_24m":0,"sanctioned_now":false,"evidence":"H-1B filings in 12 months: 13","filings_12m":13,"filings_prev_12m":7,"green_card_filings_12m":0,"median_offered_wage_usd":132500,"route":null,"cap_exempt":false,"checked_at":"2026-11-06T22:30:08+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)","US Department of Labor: PERM disclosure data (green cards)"],"filings_for_role_12m":0}],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":0,"expected_fill_days":26,"reasons":["conf:0","win:early"],"computed_at":"2026-11-06T05:58:05Z"},"pay":{"stated_usd_annual":195500,"is_top_pay":true},"html_url":"https://alion.io/job/pathai-senior-security-engineer","json_url":"https://alion.io/job/pathai-senior-security-engineer.json","meta":{"generated_at":"2026-11-07T03:53:19Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":9425,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-08T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":38957},"rest":"https://alion.io/mcp/rest/get_company?id=38957"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fpathai-senior-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fpathai-senior-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fpathai-senior-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/pathai-senior-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fpathai-senior-security-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3853895}},{"tool":"search_jobs","arguments":{"company":"pathai.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3853895},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}