Senior Security Engineer at AIOS — Remote, $150k–$250k/yr inc equity
Aios · Remote
About this role
## Senior Security Engineer — AIOS (Remote) **Compensation:** $150k–$250k/yr (incl. equity) --- ### About AIOS AIOS is building the world’s first full-stack AI doctor. We’re at **$450M ARR**, growing from **$7M/yr (April 2025)**, and we serve **200k/mo patients** via **Bolt Pharmacy** (UK). We’ve also launched **Bolt Med** (international brand) and we’re **profitable**. --- ### Role: What you’ll own As **Senior Security Engineer (IC)**, you’ll ensure we know **who is on our systems**, **what they’re using**, and **exactly what happened** when something goes wrong. You will own: - **Identity & access:** SSO, MFA, conditional access, and **joiner/mover/leaver** lifecycle - **Fleet & endpoints:** device management, encryption, patching, **lock & wipe** on offboarding, and **EDR** from alert → containment - **Logging & detection:** decide what we collect, write/tune detections, and automate response so investigations start fast (even at 3am) - **Cloud security partnership:** work with engineering on identity, logging, and access - **IT security / operations:** onboarding & offboarding, plus vendor/MSP management and escalation for IT security issues - **Incident response:** first responder for security incidents **Reporting:** Directly to the Head of Information Security (Ryan Bentz). **Work style:** Full-time, fully remote; mostly async in your chosen timezone, with availability until **midday Pacific** for calls as needed. --- ### Key Responsibilities - **Identity:** SSO/SCIM, MFA policy, conditional & device-aware access, joiner/mover/leaver - **Fleet:** MDM/UEM at scale—enrollment, encryption, patching, configuration baselines, remote wipe - **EDR:** own endpoint incidents from alert to containment - **Logging & detection:** collection strategy, detection engineering, response automation - **Cloud ownership:** partner with engineering on cloud identity, logging, and access - **Automation:** scripts + AI agents to remove repeatable work from humans - **IT operations:** end-to-end onboarding/offboarding; manage vendors/MSPs; automate to reduce tickets - **Incident response:** first responder --- ### Need to Have - **6+ years** in security engineering with hands-on depth across **identity, endpoint, and detection** - **Identity provider experience:** SSO/SCIM, conditional access, device-aware policies - **Fleet experience:** MDM/UEM at scale (enrollment, encryption, remote wipe) - **EDR experience:** run EDR and work incidents from alert → containment - **Detection engineering:** write detections; explain what they caught and how you tuned noise - **Attacker mindset:** red teaming, pentesting, bug bounties, CTFs, or similar - **Automation:** scripting (Python, bash, etc.) and experience using AI agents - **Cloud security:** enough AWS/GCP/Azure knowledge to partner on identity/logging/access - **IT & vendor management:** owned onboarding/offboarding and IT operations for distributed teams; manage MSPs/vendors to clear standards - **Communication:** clearly explain risk to employees, engineers, and executives --- ### Nice to Have - Regulated environment experience (**HIPAA, GDPR, PCI**) - Hypergrowth experience owning identity/device programs through rapid scaling - Secured distributed, multi-country workforce - Public work: tools, detections, write-ups, talks, or CVEs --- ### Cultural Standards - Belief in the mission (100M patients served by 2030) - Unwavering integrity - “Only the paranoid survive” - Insanely great execut
Listing freshness
CronJobs last confirmed this listing 2h ago. If its source stops confirming the opening for seven days, this page is removed from active inventory.