Senior Security Engineer

Smarterdx
United States
Remote

Who this role is best for

Aimed at senior security engineers with hands-on cloud and detection experience who thrive in remote collaboration and ownership-driven environments.

Best fit for

  • Senior security engineers with strong cloud and SIEM experience who value ownership and autonomy in their work
    — “This role is our hands-on owner of detection engineering and security operations.”
  • Candidates with a background in healthcare or regulated data environments and a passion for AI security
    — “Built by physician-data scientists and trained on clinically-validated EHR data.”
  • Individuals who excel at translating strategy into operational execution and have a track record of reducing false positives
    — “Run the SIEM day to day: onboard log sources, manage detection quality, and reduce false positives so real signals stand out.”

Things to consider

  • The role requires a high level of independence in executing medium-complexity security tasks.
    — “The ability to design and deliver medium-complexity security work independently.”
  • Candidates must be prepared to work fully remote within the United States.
    — “This role is fully remote within the US.”
  • There is a focus on maintaining and extending detection and response processes as repeatable knowledge.
    — “Write runbooks so detection and response are repeatable rather than tribal knowledge.”

How to stand out

  • Demonstrate your ability to design security automation and tooling for maintainability.
    — “Design detections and operational tooling for maintainability, so the work stays reliable and easy for the team to extend.”
  • Showcase your GitHub security controls implementation and code fluency in Python or TypeScript.
    — “Own and improve GitHub organization security controls as code.”
  • Emphasize your ability to provide defensible conclusions from raw log data during investigations.
    — “Investigate security alerts from raw log to a defensible conclusion.”
  • Demonstrate knowledge of AWS security services like GuardDuty and AWS Config.
    — “Familiarity with cloud logging and observability (CloudTrail, VPC Flow Logs) and AWS security services (GuardDuty, AWS Config).”
Pace · Fast PacedCollaboration · HighAutonomy · HighDecision Impact · TeamLevel · Senior

Derived from job-description analysis by Serendipath's career intelligence engine.

What success looks like

  • high-signal detections
  • reduced false positives
  • successful incident response
  • improved cloud security
  • enhanced GitHub security
Typical background
4+ years in security engineeringAWS and cloud-native infrastructure experiencemodern SIEM experience

Skills & requirements

Required

Security EngineeringAWSSIEMDetection EngineeringCloud Security OperationsIncident ResponsePythonTypeScriptCloud LoggingObservabilityNetwork SecurityInfrastructure SecuritySecurity AutomationSecurity Design ReviewsRfcsPull Requests

Preferred

PantherGuarddutyWizTerraformVPCSecurity GroupsEgress ControlsNetwork TelemetryIngress Monitoring

Stack & domain

PythonTypeScriptAWSPantherCloudtrailVPC Flow LogsGuarddutyAWS ConfigTerraformNetwork SecurityInfrastructure SecurityLeadershipCommunicationProblem-solvingTeamworkSecurity EngineeringCloud SecurityAI SecurityIncident ResponseDetection Engineering

About the role

Original posting from Smarterdx via Greenhouse

SmarterDx is transforming how health systems use clinical AI to capture the full value of patient care delivered. Built by physician-data scientists and trained on clinically-validated EHR data, our clinical AI platform interprets the nuances behind every patient story and makes clinically-sound recommendations for revenue cycle teams — helping hospitals recover earned revenue, improve quality metrics, reduce denials, and streamline revenue cycle operations. As a Smartian, you’ll help build technology that makes healthcare more accurate, sustainable, and effective for everyone. Learn more at smarterdx.com/careers.

Role

SmarterDx Security Engineering has a broad scope: AI, cloud, and enterprise security, plus reviews of new designs and code across the company. This role is our hands-on owner of detection engineering and security operations. You will turn our detection platform into real coverage: writing and tuning detections in Panther, keeping alerts high-signal, running the SIEM as it grows, and being on point when an alert turns into an investigation. You will also handle the day-to-day work of cloud security operations and help run incident response.

You will work closely with our Staff Security Engineer, who sets detection and AI-security strategy. Your job is to make that strategy real in production and keep it sharp. There is room to grow into deeper detection engineering, cloud security, and security automation, on a team that invests in leveling people up.

**This role is fully remote within the US**

What You’ll Do

Write, tune, and maintain detections in our SIEM (Panther) across cloud, container, and SaaS log sources, keeping coverage broad and alerts high-signal.

Run the SIEM day to day: onboard log sources, manage detection quality, and reduce false positives so real signals stand out.

Triage and investigate security alerts from raw log to conclusion, and help execute our incident-response playbooks.

Run cloud security operations in AWS: investigate GuardDuty and Wiz findings, tighten configurations, and close cloud misconfigurations.

Own and improve GitHub organization security controls as code.

Partner on network and infrastructure security: help onboard network telemetry, support egress monitoring, and provide backup depth alongside our infrastructure security engineer.

Help build and extend the team's security-automation tooling.

Write runbooks so detection and response are repeatable rather than tribal knowledge.

Contribute to security design reviews and RFCs, and give substantive security feedback on pull requests.

Support the Vulnerability Management program with triage and exploitability assessment as volume requires.

What You Bring

4+ years in security engineering, with solid hands-on experience in AWS and cloud-native infrastructure.

Direct experience writing and tuning detections in a modern SIEM (Panther or similar) and reasoning about detection coverage.

Experience investigating security alerts from raw log to a defensible conclusion.

The ability to design and deliver medium-complexity security work independently.

Code fluency in Python or TypeScript to automate your work.

Familiarity with cloud logging and observability (CloudTrail, VPC Flow Logs) and AWS security services (GuardDuty, AWS Config).

Solid AWS network security fundamentals (VPC, security groups, egress controls) and Terraform, enough to partner on and back up our network and infrastructure security work.

Clear writing; you leave behind runbooks and tickets others can follow.

Design detections and operational tooling for maintainability, so the work stays reliable and easy for the team to extend.

An ownership mindset: you close loops rather than drop them.

Nice To Haves

Startup experience, especially in health tech or another regulated, data-sensitive environment.

Incident-response experience, or a strong interest in growing into it.

Network security depth beyond fundamentals (VPC design, segmentation, Transit Gateway, firewall/egress architecture).

Kubernetes (EKS) and container security exposure.

Interest in AI and agentic security and in building security automation.

Our Tech Stack

Cloud and infrastructure: AWS, Kubernetes (EKS), Terraform, Postgres

Detection and security tooling: Panther (SIEM), GuardDuty, AWS Config, Wiz, Snyk, GitHub Advanced Security, CrowdStrike, Nightfall, Drata

Languages: Python, TypeScript, Go

AI and automation: Claude, MCP, and agentic tooling used across engineering

Compensation

$190k to 220k base salary

#LI-Remote

#LI-DNP

Benefits

Medical, Dental & Vision – Comprehensive plans with leading insurance providers, covering 75% of your premiums, depending on the plan.

Paid Parental Leave – Generous paid leave to support families through birth or adoption: Up to 12 weeks for parents.

Remote-First Team – Work from anywhere in the U.S.

Unlimited PTO & 10 Holidays – So you can relax and recharge.

401(k) with Traditional & Roth Options – Tax-advantaged retirement savings through Fidelity with a 4% match.

Minimal Bureaucracy – A fast-moving, high-impact environment where you can focus on what matters.

Incredible Teammates! – Work alongside smart, supportive, and mission-driven colleagues.

Source: Smarterdx careers (Greenhouse)

Similar roles