Senior Security Engineer at Manifold AI

As the amount of biomedical data types and scale continues to grow, old ways of working with data hold back the pace of progress — fragmented data, overwhelming omics, complex manual work, analysis backlogs, friction in secure collaboration, and barriers to distributing workflows. We have a conviction about how to move closer to a future of precision medicine by making it ten times faster and one-tenth the cost to generate knowledge, develop better treatments, and improve patient outcomes.

As a result, Manifold began its journey. We’re a health research infrastructure company that enables researchers to focus on the high-impact research that matters most, by taking care of all the other stuff that gets in the way. As a trusted research platform for modern scientific collaboration, we partner with top-tier healthcare providers, life sciences organizations, and research institutions to unlock real-world data and deliver actionable insights that improve precision medicine and discovery.

We’re currently a Series A funded startup with 50+ employees across North America. Backed by top-tier investors and healthcare leaders including; Andrew Marks of TQ Ventures, Jason Schoettler of Calibrate Ventures, Gaurav Singal of Foundation Medicine, Steve Fredette of Toast, Amar Kendale of Livongo, Andrew Bialecki of Klaviyo, Brad Porter of Amazon, Jon Karlen of Acadian Software, and Pravin Soni of Elevation Pharma.

Our Culture

At Manifold, we value intellectual rigor, humility, and mission-driven collaboration. We believe that technology is only as powerful as the people behind it, and we’re building a culture that supports growth, inclusion, and curiosity. We work fast, think deeply, and strive to make a lasting impact on patients' lives.

About the Role

Manifold is looking for a Security Engineer specializing in Vulnerability Management, to focus on identifying, assessing, and mitigating security risks in our organization's systems and networks.

This role involves proactive security programs, threat modeling, in-depth technical assessments, and leading strategic security planning. Key responsibilities include managing the vulnerability lifecycle, driving automation initiatives, and ensuring the organization's security strategy aligns with industry standards.

This role also requires application security knowledge and experience configuring web scanners for multiple authentication types. Deep knowledge of OAuth and SAML is critical. The candidate should be able to set up and troubleshoot scans across Linux/Docker environments, IaaS platforms, and application stacks.

What You’ll Do

• Identifying and Discovering Vulnerabilities:

  Use various techniques like vulnerability scanning, penetration testing, and bug bounties to uncover weaknesses in systems, applications, and networks.

• Analyzing and Assessing Vulnerabilities:

  Analyze the potential impact of vulnerabilities, consider the likelihood of exploitation, and assess the overall risk.

• Prioritizing Risks:

  Prioritize vulnerabilities for remediation, focusing on those that pose the greatest threat to the organization's assets and data.

• Remediating and Mitigating Vulnerabilities:

  Work with engineering, IT, and other teams to implement patches, fix vulnerabilities, and implement mitigation strategies.

• Validating and Monitoring:

  Validate that vulnerabilities have been successfully addressed and continue to monitor the system for new or re-emerging vulnerabilities.

• Driving Automation and DevSecOps:

  Automate vulnerability scanning, assessment, and reporting processes to improve efficiency and scalability, and to integrate security practices into the software development lifecycle.

• Managing Sensitive Data:

  Maintain security controls and compliance requirements for handling sensitive customer data, including clinical records, HIPAA-protected health information, and Federal data sets.

• Collaborating with Other Teams:

  Collaborate with Engineering and Corporate IT to enhance overall security posture.

• Continuous Learning:

  Stay updated on the latest security threats, vulnerabilities, and best practices to effectively manage and mitigate risks.

What You’ll Bring

• Strong understanding of security principles, network architecture, and operating systems.
• Experience with various vulnerability scanning tools and techniques.
• Experience patching cloud infrastructure and code dependencies.
• Familiarity with security standards and frameworks like NIST 800-53, FedRAMP, ISO27001, HIPAA.
• Ability to perform root cause analysis and develop effective remediation plans.
• Strong analytical and problem-solving skills.
• Good communication and collaboration skills.

The Security Engineer plays a critical role in maintaining a strong security posture by proactively addressing vulnerabilities and mitigating potential risks.

Location

• Remote or Boston, MA

What We Offer

• Fully supported remote work (North American time zones)
• Comprehensive healthcare, dental, and vision plans
• Life insurance and disability coverage
• 401(k) with company match
• Company equity 
• 12 weeks of paid parental leave
• Commuter benefits (for those who elect to work from our Newton, MA office)

About the Team

• We are a team of proven startup operators with a track record of building successful technology companies
• Deep subject matter experts in oncology, clinical practice, precision medicine, enterprise SaaS, and healthcare technology
• We're a startup—some things are unstructured, and that’s part of the opportunity
• We're looking for mission-driven builders to help us create the next best AI powered platform in life sciences