Founding Security Engineer at Biograph

Biograph is seeking a Founding Security Engineer to architect and scale our security program. We are revolutionizing healthcare with a data-driven approach to preventative care, and a robust security program is crucial to our success. This is a strategic leadership role where you’ll chart the course for our security initiatives and, as we grow, build and lead a team to bring your vision to life.

Our small and nimble engineering team thrives on ownership and autonomy. We’re building foundational systems with an eye toward scalability and an emphasis on best practices. We’re looking for people who value product and communication as much as technical excellence. Joining this early provides a great opportunity to help shape our technical systems and culture.

This is a hybrid role based in New York City. Team members typically work in our Manhattan office 3-5 days a week, with empathetic flexibility.

WHAT YOU WILL DO

• Strategic Leadership - define Biograph’s security roadmap, evaluate emerging threats and technologies, and establish best practices to ensure data integrity, confidentiality, and availability.
• Building a Security-First Culture - implement and enforce security policies, procedures, and training programs across the organization, fostering a culture of security awareness.
• Securing Hybrid Infrastructure - design and implement security solutions for our hybrid environment, encompassing both cloud-based digital products and on-premise clinic infrastructure.
• Threat Modeling and Risk Assessment - conduct regular security assessments, penetration testing, and vulnerability analysis to identify and mitigate potential risks.
• Incident Response and Compliance - develop and manage incident response plans, ensuring timely and effective handling of security incidents, and maintain compliance with relevant healthcare regulations (e.g. HIPAA).

WHAT YOU BRING TO THE ROLE

• 5+ years in security engineering, with a proven track record of building and maintaining secure systems in a production environment.
• Deep expertise in security tools (e.g., firewalls, SIEM, vulnerability scanners) and best practices (e.g., zero trust, least privilege), with a focus on practical, scalable implementation.
• Experience upholding compliance standards (e.g., HIPAA, SOC 2), ensuring our systems meet regulatory and ethical requirements in healthcare.
• Ability to think big-picture, architect scalable security solutions, and prioritize initiatives that balance risk mitigation with innovation.
• Able to work in our NYC office (FiDi) 3-5 days a week.
• Passionate about applying technology to improve healthcare.

COMP | PERKS | BENEFITS

• $180,000 - $250,000 per year
• Equity
• Medical, dental, and vision insurance
• 401(k)
• Paid maternity / paternity leave
• Unlimited PTO
• Biograph Membership