Lead Security Engineer

The Opportunity

Join the team securing the platform that helps millions of people move beyond musculoskeletal pain. As Hinge Health's engineering organization embraces AI-assisted development — including AI-powered code generation, automated PR review workflows, agent sandboxing, and MCP gateway integrations — we need a Lead Security Engineer who will build the security guardrails, tooling, and standards that ensure we ship with confidence. You'll sit at the critical intersection of cloud security , AI-enabled engineering , and identity & access management , partnering closely with Application Security, SRE, and R&D Engineering to design and enforce security-by-design principles across our AWS environment, CI/CD pipelines, and developer tooling. This is your chance to make a real impact on the lives of millions by driving advancements in healthcare security — ensuring utmost compliance and privacy while enabling engineers to move fast and safely.

Candidates must be within commuting distance to New York City

Who You Are

A Security-First Thinker : You instinctively design systems that are secure by default, and you know how to balance security rigor with engineering velocity.

An AI-Savvy Engineer : You're energized (not intimidated) by the rapid adoption of AI-assisted development and see it as an opportunity to build novel security frameworks.

A Trust Builder : You communicate effectively across engineering, compliance, and leadership teams — authoring clear, plain-spoken technical proposals that drive alignment.

A Learn-it-all : You stay ahead of emerging threats and continuously evolve your approach — from adversarial ML to supply chain attacks on AI pipelines.

A Leader at All Levels : You're hands-on in code and architecture, but you also mentor others and help the team self-organize around measurable outcomes.

Basic Qualifications

Bachelor's degree in a technical, engineering, or scientific field — or comparable education/experience

3+ years in cybersecurity, with 3+ years focused on security operations or IAM

2+ years of experience in cloud security operations, specifically AWS

2+ years of coding experience (e.g., Python, Go, or TypeScript) with hands-on experience developing Terraform and infrastructure-as-code

Hands-on experience securing AI/ML systems, including data pipelines, model deployments, API integrations, and their security challenges

Preferred Qualifications

AWS Solutions Architect or Security Specialty certification

AI/ML security certifications or familiarity with adversarial machine learning threats and mitigation strategies

Experience building or integrating security controls into CI/CD pipelines and AI-assisted development workflows

Experience managing an Enterprise IdP, especially Okta, with deep understanding of OAuth 2.0 and SAML

SOC 2, PCI, or HIPAA audit/training certifications

Knowledge of low-level networking principles

What You'll Accomplish

In your first 3 months: