All remote jobs

Security Engineer

AI Summary
Latent is seeking a Security Engineer to build and operate a broad security program for an AI-powered healthcare platform. The role covers cloud, AI, data, application, IT, endpoint, vulnerability, and incident-response security. The engineer will automate security controls, partner across engineering and business teams, and help maintain a secure-by-default environment. This is a high-impact generalist position in a fast-growing company handling sensitive healthcare data and compliance requirements.
Remote from
USA
Salary
USD 200k–240k / yr
Department
Cybersecurity
Employment
Full Time
Experience
Senior
Published
Apply before
12 Dec 2026
Listing views
52
Application actions
1
Application toolkit

Make your next move.

Prepare your resume, explore your fit, and draft a cover letter for this opportunity.

Opportunity details

About this role.

About Latent

Latent is the enterprise pharmacy intelligence platform, powered by a clinical agentic engine, that enables health systems to grow their pharmacy operations and serve more patients. One engine works across the pharmacy journey to identify patients who qualify for care, improve medication access, capture eligible prescriptions and support patients throughout treatment. Latent’s platform enables more than 60 leading health systems that collectively serve an estimated 70 million people. Founded by Sriram “Sri” Somasundaram and Rishabh Jain, Latent has raised $80 million from Transformation Capital, Spark Capital, Conviction, General Catalyst, Y Combinator, and others.

The Role

We’re building the intelligence layer of American healthcare. Our systems sit directly in critical workflows and power how clinical AI is delivered and used in practice. You’ll be working on securing all aspects of Latent’s code, cloud, AI, and IT systems. You will be partnering with all Latent employees across engineering, product, legal, and GTM to safely enable Latent employees to move quickly without sacrificing security and compliance.

What You’ll Do

You’ll be a Security generalist, helping define, lead, and execute the roadmap in all aspects of Security. Here are some of the areas you will work in:

  • Cloud Security
    Mature and harden Latent’s cloud environment from a security and compliance standpoint into a secure-by-default stance so developers can ship code with confidence and the Infrastructure team doesn’t have to worry that their next Terraform apply will put everything on the open internet.

  • AI Security
    Employees at Latent use a lot of AI. Help us give all of our employees access to the latest and greatest AI-powered tools in a secure and compliant way so our agents don’t run amok and do the wrong thing.

  • Data Security
    Latent’s business thrives on giving our users deep insights into their patient data, their pharmacy performance, and how our AI is performing. Help us secure our data warehouse so that our internal employees and customers get the insight they need without sacrificing our commitment to patient security and privacy.

  • Application and Product Security
    Latent’s developers ship a lot of code. Help us come up with ways to automate all aspects of the SDLC from a security perspective to ensure security is built in instead of being a bolt-on afterwards. In addition, as Latent plans the next iteration of its application and agentic platform, help us come up with the right security requirements for new product features and enhancements.

  • IT Security
    Help our hard-working IT folks secure Latent employee devices and applications. Automate security around IT and business applications including user lifecycle provisioning, just-in-time access, elevated access provisioning, and device hardening to ensure employees can do their job securely without thinking about security.

  • Incident Detection and Response
    Help the Security team investigate potential incidents, build detections that are specific to Latent’s environment, and work with our AI-native MDR service to improve accuracy around escalated incidents.

What We’re Looking For

You’re a builder who holds yourself and others to high standards. You can design, develop, and create security automations and workflows using AI that can scale Latent’s security team.

  • Ownership: You don’t hand off problems or wait for someone to tell you what to do. Find our gaps, risks, and vulnerabilities and implement the solution.

  • Bias for Action: You won’t wait for someone else to solve a problem you’re in a position to solve.

  • A Yes Mindset: Latent’s Security team is not a no factory. While we put our foot down when the risk is high, our goal is to find creative solutions that 1) Understand what an employee actually needs and 2) That balances speed and security.

  • Automation Mindset: You’re always looking for ways to move faster by automating repetitive or manual work.

  • Complexity Management: You’re good at planning and building the simplest solution that gets the job done, with an eye towards the future as Latent scales quickly. You can take a complex and large product and break it down into focused, iterative steps that incrementally make our security and compliance posture better.

  • Product Focus: You’re comfortable working closely with the customers that use Latent’s security program: Latent’s employees! You love sitting alongside folks from all areas of the company, understanding their day to day, and crafting the perfect solution for them both now and in the future.

Technical Qualifications

We really are looking for a little bit of a unicorn and someone who has done it all when it comes to security. If you’ve worked in multiple of these areas, this is the place for you!

  • You aren’t afraid to use coding agents to contribute solutions directly to the code base! (You don’t have to be a coding wizard Harry, but you do need to understand basic engineering principles to give your coding agent positive feedback if it spits out the wrong solution)

  • You’ve built out IAM workflows (Okta, SSO, SAML, JIT provisioning) to give employees just the right amount of access to get their job done

  • You’ve designed and rolled out managed settings for AI tools and coding agents to make sure employees have a good sandbox to work in to get their jobs done with AI

  • You have collaborated with developers to help them write secure code and secure features.

  • You’ve helped harden AWS cloud and CI/CD environments (Think well-scoped IAM roles, hardening cloud environments to CIS standards, picking the right CSPM and driving down a findings backlog ect..)

  • You’ve helped build and maintain a vulnerability management program all the way up the stack (Server/Container/3rd Party OSS/Custom Code)

  • You’ve automated security and compliance requirements for MacOS and BYOD endpoints using an MDM

  • You understand your way around a security alert, security investigation, and can write and tune detections that are relevant to Latent’s environment

Nice to Have

  • You have experience working at an early stage startup doing security

  • You’ve worked with healthcare data before and can speak a little HIPAA

  • You’ve participated in or built controls for SOC2 audits

Why Join Latent

  • Backed by top-tier investors including General Catalyst, Conviction, and Y Combinator

  • Work alongside a high-caliber team building products our healthcare partners love

  • Work on mission-critical problems at the intersection of AI and healthcare

  • Real ownership and visibility

  • High-impact role on a small, fast-growing team

Benefits

  • Competitive compensation, including meaningful equity

  • Medical, dental, and vision insurance for employee and dependents

  • Flexible PTO policy

  • Paid parental leave

  • Fertility and family-building stipend through Carrot

Apply now >

This job listing has been manually reviewed by the Jobicy Trust & Safety Team for compliance with our posting guidelines, including verification of the company's legitimacy, accuracy of job details, clarity of remote work policy, and absence of misleading or fraudulent content.

Role DNA

A quick view of the complexity, pace, ownership and collaboration implied by the job description.

Job Complexity

5/5
EasyHard

Pace & Pressure

5/5
RelaxedFast-paced

Autonomy Level

5/5
GuidedFull ownership

Communication Load

5/5
IndependentCollaborative
AI insightThis is a senior-level security generalist role spanning multiple technical domains, including AWS, IAM, SDLC security, AI governance, endpoint management, and detection engineering. The candidate must independently identify risks, implement scalable controls, and balance security with rapid product delivery.

Salary analysis

Estimated compensation compared with the broader US market for similar roles.

Estimated job median (per year)Market rate
$220,000
US market range (per year)$190k–$260k
AI insightThe employer discloses a yearly base salary range of $200,000 to $240,000 USD, with a midpoint of $220,000. This is a credible range for a highly autonomous US Security Engineer covering cloud, product, AI, and compliance security. The estimated US market range for a comparable senior security generalist role is $190,000 to $260,000 per year.

Core skills

Skills and capabilities most closely associated with this opportunity.

Sample interview questions
How would you establish a secure-by-default AWS environment for a rapidly growing engineering organization?

I would begin with an assessment of the current account structure, IAM permissions, network exposure, logging, encryption, and configuration baselines. I would prioritize high-risk gaps, implement guardrails through infrastructure as code and policy automation, and establish continuous CSPM monitoring. The goal would be to make secure patterns the easiest path for developers while measuring remediation progress over time.

Describe how you would build an IAM program using Okta, SSO, SAML, and just-in-time provisioning.

I would inventory critical applications and access roles, define least-privilege role models, and integrate identity providers with SSO and SAML where supported. I would automate joiner, mover, and leaver workflows through just-in-time provisioning and group-based access, while requiring stronger controls for privileged roles. Regular access reviews, audit logging, and exception processes would ensure the program remains effective as the company grows.

How would you approach security governance for AI tools and coding agents used by employees?

I would identify approved use cases, data classifications, vendor risks, and the permissions available to AI agents. Controls would include managed configurations, approved tool catalogs, restrictions on sensitive data sharing, identity-based access, logging, and clear guidance for employees. I would also partner with legal, engineering, and product teams to continuously evaluate new risks as tools and capabilities evolve.

What steps would you take to improve application security without slowing down product development?

I would embed security into existing engineering workflows instead of relying primarily on manual reviews. This would include secure design guidance, automated dependency and code scanning, secrets detection, CI/CD guardrails, threat modeling for higher-risk features, and actionable remediation standards. I would focus on reducing developer friction by tuning tools, prioritizing exploitable findings, and providing reusable secure implementation patterns.

How do you handle a potentially high-severity security alert when the available evidence is incomplete?

I would first validate the signal by reviewing affected assets, identities, telemetry, and the alert's detection logic. I would contain credible risk proportionately, preserve evidence, and coordinate with relevant owners while documenting decisions and timelines. After resolution, I would improve detections, controls, and response procedures to prevent recurrence and reduce false positives.

This analysis is generated from the job description. Salary estimates, role characteristics and sample answers are guidance, not employer-provided facts.
Next step

Apply now.

Follow the employer’s application method and review Jobicy’s safety guidance before sharing personal information.

Did you apply?Let us know, and we’ll help you track your application.

Continue on the employer website

Protect your personal information and never pay to secure an interview or job offer. .

Log in to save
One quick step before you apply

Sign in to continue.

Sign in or create a free account to continue to the employer's application.

Add alert
Jobs Talent AI Tools Salaries
Menu