SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Plenful is a healthcare AI automation platform backed by $50M Series B funding (Notable Capital, Bessemer Venture Partners, TQ Ventures, Susa/Kivu Ventures). The company serves 100+ health systems, pharmacies, and healthcare organizations, helping them eliminate manual work, reduce administrative burden, and improve compliance.
As Senior Manager / Manager, Security, you will lead and execute security across the entire organization—from product and application security to cloud infrastructure, corporate security, governance, compliance, incident response, and customer trust. You will own a pragmatic security roadmap aligned with Plenful's product and business priorities, lead a small security team, and partner across Engineering, Product, IT, Legal, Compliance, Sales, and Executive Leadership.
This is a hands-on role. You will work directly with engineers to identify, prioritize, and remediate vulnerabilities; improve secure development practices; strengthen detection and incident response; and implement security tooling and automation.
Key responsibilities include:
- Define and execute security roadmap; lead small security team and coordinate work across functions
- Establish secure software development lifecycle practices; partner with engineers on vulnerability identification and remediation
- Review application code and architecture; lead threat modeling, secure architecture reviews, penetration testing, and vulnerability management
- Integrate SAST, DAST, software composition analysis, and other controls into CI/CD pipelines
- Define security standards for AI-powered products, including data protection, tenant isolation, prompt-injection risks, and agent permissions
- Build and operate security monitoring, detection, logging, alerting, and incident response capabilities
- Triage findings and incidents; lead investigations and postmortems
- Strengthen AWS infrastructure security, identity and access management, secrets management, and network security
- Lead security compliance strategy (SOC 2, HIPAA, HITRUST); develop security policies and standards
- Represent Security in enterprise customer reviews and technical discussions
- Communicate security posture and risks to executive leadership and Board
Within 12 months, you will establish a risk-based security roadmap, reduce vulnerability backlogs, embed AppSec controls into Engineering workflows, improve monitoring and incident response, strengthen cloud security and tenant isolation, establish AI/ML security standards, and strengthen compliance programs.
The company offers hybrid work (remote-first with two days per week in San Francisco office for R&D roles), full medical/dental/vision insurance, 401(k) match, equity, unlimited PTO, $100/week lunch stipend, $100/month wellness stipend, $100/month commuter benefits, and paid parental leave.
REQUIREMENTS:
- 12+ years of progressive experience in cybersecurity, application security, security engineering, security operations, cloud security, or infrastructure security
- 2+ years leading security teams, programs, or major cross-functional security initiatives
- Deep, hands-on experience in application security and security operations
- Demonstrated ability to investigate and remediate vulnerabilities in modern web applications, APIs, and distributed systems
- Ability to read application code, reason about security flaws, and work directly with engineers on fixes (contributing security-related code changes strongly preferred)
- Experience with threat modeling, secure architecture reviews, penetration-test remediation, vulnerability management, and incident response
- Experience integrating and operating security tooling across CI/CD pipelines and developer workflows
- Strong technical background in modern cloud environments, preferably AWS (IAM, logging, network security, secrets management, Infrastructure as Code)
- Experience securing enterprise SaaS platforms and multi-tenant systems
- Experience with healthcare security and compliance frameworks, including HIPAA and SOC 2
- Strong judgment in prioritizing security work in fast-moving environments with limited resources
- Exceptional communication skills with engineers, executives, customers, auditors, Legal, Compliance, and Sales
- Bachelor's degree in Computer Science, Cybersecurity, Information Systems, or equivalent practical experience
PREFERRED QUALIFICATIONS:
- Experience as early security hire at startup or high-growth technology company
- Hands-on experience with Python, TypeScript, or similar modern application languages
- HITRUST certification experience
- Experience securing AI/ML platforms, agentic systems, and modern data infrastructure
- Experience with Kubernetes, container security, Infrastructure as Code, and cloud-native architectures
- Experience building security automation and internal security tooling
- CISSP, CISM, CCSP, GIAC, or comparable certifications
