About this role
Protecting cloud infrastructure, data pipelines, and proprietary AI platforms forms the core focus for this role at Suki, where you will safeguard sensitive health information and mature the overall security posture. You will bridge traditional cloud security with emerging AI risk management, collaborating directly with software and machine learning engineers to ensure applications and models are secure by design. This position exists to maintain regulatory compliance and prevent exposures in a high-growth healthcare SaaS environment handling Protected Health Information.
Ideal candidates bring a strong background in information security paired with hands-on evaluation of AI risks in cloud environments. You will manage large security projects, integrate guardrails into CI/CD pipelines, and conduct red-teaming exercises on large language models.
What you will do
- Manage large security projects while partnering with cross-departmental leaders to deliver secure-by-design products.
- Integrate security guardrails natively into processes, CI/CD pipelines, APIs, and workflows to block issues.
- Manage technical security architecture across a multi-cloud footprint using zero-trust principles and CSPM.
- Conduct security assessments and red-teaming on proprietary and third-party AI models, LLMs, and data pipelines.
- Implement guardrails to prevent PHI exposure in model training, vector databases, RAG architectures, and fine-tuning datasets.
- Design and enforce micro-segmentation, VPC architecture, SASE/VPN solutions, and strict network isolation.
What you need
- Bring 8+ years of experience in Information Security, including 1+ years evaluating and remediating AI risk.
- Possess hands-on experience securing AWS, GCP, or Azure environments using automated tools and native security services.
- Demonstrate strong coding skills for developing secure tooling, automation, and leveraging agentic AI.
- Apply expertise in secure coding practices, API security, OWASP Top 10 vulnerabilities, and OWASP Top 10 for LLMs.
- Maintain a deep understanding of healthcare compliance standards including HIPAA, HITECH, HITRUST CSF, and NIST.
- Show demonstrated leadership ability with experience managing security projects and mentoring junior team members.
Skills and tech stack
Questions candidates ask
What kind of environment will I be securing?
You will be protecting Suki's cloud infrastructure, data pipelines, high-throughput network boundaries, and cutting-edge AI platform and product capabilities. The role operates within a high-growth healthcare SaaS environment handling sensitive Protected Health Information.
Who will I work with day to day?
You will partner closely with Software Engineers and Machine Learning Engineers to embed security in the development lifecycle. You will also act as a trusted advisor by partnering with cross-departmental leaders to reduce friction and increase speed-to-market.
What specific AI security tasks are involved?
You will conduct security assessments and red-teaming on proprietary and third-party AI/ML models, LLMs, and data pipelines, testing for prompt injection, data poisoning, training data extraction, and model inversion. Additionally, you will implement guardrails to prevent PHI exposure in model training, vector databases, RAG architectures, and fine-tuning datasets.