{"id":3619460,"url":"https://alion.io/job/sage-care-senior-security-engineer","title":"Senior Security Engineer","company":{"id":7617,"name":"Sage Care","domain":"sagecare.com","url":"https://alion.io/company/sage-care-inc","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Ashby","truth_index":{"grade":"A","score":95,"open_postings":5,"ghost_share":0,"stale_share":0,"repost_share":0,"time_to_fill_p50_days":127,"computed_at":"2026-11-04T06:34:25Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Palo Alto, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":145000,"max":175000,"currency":"USD","period":"year","gross":null,"usd_annual":175000},"salary_estimate":null,"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AI Agents","optional":false},{"name":"Auth0","optional":false},{"name":"AWS","optional":false},{"name":"CI/CD","optional":false},{"name":"GCP","optional":false},{"name":"Google BigQuery","optional":false},{"name":"Google GKE","optional":false},{"name":"Google Workspace","optional":false},{"name":"HIPAA","optional":false},{"name":"IAM","optional":false},{"name":"Kubernetes","optional":false},{"name":"Least Privilege","optional":false},{"name":"LLM","optional":false},{"name":"Okta","optional":false},{"name":"Python","optional":false},{"name":"SOC 2","optional":false},{"name":"Terraform","optional":false},{"name":"Threat Modeling","optional":false},{"name":"ISO 27001","optional":true}],"status":"live","first_seen_at":"2026-11-02T15:14:35Z","employer_posted_date":"2026-11-02","last_verified_at":"2026-11-04T22:30:34Z","board_verified":true,"closed_at":null,"days_open":2,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":2},"description":"About Sage Care\nSage Care is a fast growing, early stage healthcare startup transforming care navigation with AI. Our platform helps patients find the right care, enables providers to focus on the people who need them most, and improves access, quality, and economic outcomes at scale.\nFounded by leaders from Apple, Uber, and Carbon Health, Sage Care is backed by top tier investors including General Catalyst and Chelsea Clinton. We work with health systems across the U.S. and have expanded internationally to the MENA region.\nAbout the Role\nHospitals trust Sage with patient data, and every new health system brings security reviews and audits. As our first dedicated Security Engineer, you'll own security and compliance across our platform, applications, identity, and SaaS footprint, and you'll share ownership of the GCP and Kubernetes infrastructure that runs it. You'll set the guidelines engineering teams follow, implement the controls that matter most yourself, and be the technical voice in front of customer security teams.\nYou'll report to the Head of Core Platform, Infrastructure and Security, who serves as Sage's Security Officer and HIPAA Lead.\nWhat You'll Do\nRun our compliance program: SOC 2 Type II, HIPAA safeguards, risk assessments, vendor BAAs, and pen test remediation, with Vanta as the system of record. Extend it to HITRUST and international requirements as we grow.\n\nLead customer security reviews, questionnaires, and audits with hospital IT and security teams across all customers, in the U.S. and MENA.\n\nSet security guidelines for engineering: secure design review for new services, application security standards, dependency and code scanning, and secrets handling. Decide what must be done and work with teams to get it done.\n\nOwn identity and access: Auth0, Google Workspace, SSO and MFA, access reviews, and least privilege across cloud and SaaS.\n\nBuild and operate infrastructure alongside the DevOps team: GCP, GKE, Terraform, and CI/CD, with IAM hardening, network controls, and policy as code built in.\n\nGovern PHI: access policy, audit logging, retention, and security review of new data flows, including BigQuery.\n\nOwn detection and incident response: logging and alerting, runbooks, and the breach notification process.\n\nSecure our AI agents: threat model prompt injection, tool misuse, and sensitive data disclosure in voice and LLM workflows.\n\nWhat We're Looking For\nRequired\n5+ years in security engineering or infrastructure with security ownership.\n\nHands on SOC 2 and HIPAA experience in production environments, with Vanta, Drata, or similar.\n\nApplication security experience: secure code review, threat modeling, and CI/CD scanning.\n\nIdentity and access management experience with Auth0, Okta, or similar, and SSO/MFA across SaaS.\n\nStrong GCP or AWS security, plus Kubernetes and Terraform in production.\n\nScripting in Python or Go.\n\nClear communication with engineers, auditors, and customer security teams; comfortable leading customer facing reviews.\n\nNice to Have\nHealthcare experience handling PHI.\n\nHITRUST, ISO 27001, or UAE or other international healthcare compliance.\n\nSecuring LLM or voice AI products.\n\nExperience as an early or first security hire at a startup.\n\nHow We Work\nAt Sage Care, our values shape how we build, collaborate, and serve.\nDo Good Through Serving People: We serve users, teammates, and communities with integrity, compassion, kindness, and optimism.\n\nInnovate with Safety, Evidence, and Transparency: We move quickly while prioritizing trust, safety, ethical decision making, and evidence based approaches.\n\nLead with Curiosity and Kindness: We ask questions before making assumptions and approach discovery, debate, and problem solving with humility and care.\n\nWe, Not Me: We believe the best work happens through collaboration, mutual respect, and constructive feedback.\n\nEfficiency and AI in All We Do: We use automation and AI thoughtfully to work smarter, create leverage, and build better products.","description_format":"text","description_chars":3994,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Patient Access & Booking","Care Coordination & Population Health"],"lifecycle":[{"event":"open","at":"2026-11-02T17:48:34Z"}],"visa":[{"country":"US","licensed_sponsor":true,"evidence":"Filed H-1B visas in the last two years","filings_12m":0,"filings_prev_12m":2,"green_card_filings_12m":0,"median_offered_wage_usd":null,"route":null,"cap_exempt":false,"checked_at":"2026-10-29T16:27:21+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)"],"filings_for_role_12m":0}],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":1,"expected_fill_days":127,"reasons":["conf:3","win:early"],"computed_at":"2026-11-04T06:34:25Z"},"pay":{"stated_usd_annual":175000,"is_top_pay":true},"html_url":"https://alion.io/job/sage-care-senior-security-engineer","json_url":"https://alion.io/job/sage-care-senior-security-engineer.json","meta":{"generated_at":"2026-11-04T23:48:23Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":844,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-05T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":7617},"rest":"https://alion.io/mcp/rest/get_company?id=7617"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fsage-care-senior-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fsage-care-senior-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fsage-care-senior-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/sage-care-senior-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fsage-care-senior-security-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3619460}},{"tool":"search_jobs","arguments":{"company":"sagecare.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3619460},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}