SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
K Health is an AI-powered virtual care platform serving leading health systems. This role joins K's critical InfoSec team to protect infrastructure, applications, cloud security, and customer trust across a highly regulated healthcare technology environment.
You will operate with autonomy to define and implement cutting-edge security solutions spanning AppSec, CloudSec, SecOps, ITSec, and Compliance. The role requires both strategic thinking—reading and interpreting architecture, planning net-new security solutions—and hands-on execution across the entire technical ecosystem.
Key responsibilities:
- Lead development and implementation of robust application security protocols throughout the Software Development Lifecycle (SDLC)
- Design, deploy, and continuously monitor cloud security architecture across cloud environments
- Manage security posture of K's core IT infrastructure, internal networks, and perimeter defenses
- Ensure adherence to healthcare regulatory requirements (HIPAA, GDPR, etc.) across all product lines
- Conduct proactive vulnerability assessments, penetration tests, and security reviews
- Collaborate with engineering teams to integrate security tools and practices into CI/CD pipelines
- Provide on-call support rotation for critical security incidents
The team is lean and spans multiple security domains, requiring flexibility and breadth. You'll work in a fast-moving healthcare AI environment where security decisions directly impact patient trust and regulatory compliance.
Requirements:
- 5+ years of experience in Information Security, Cloud Security, IT Security, and/or Application Security
- Strong expertise in cloud technology (AWS, GCP, or Azure)
- Modern programming language proficiency and understanding of security implications of AI code development utilities
- Demonstrated experience researching, establishing, and rolling out enterprise-wide security policies and guidelines
- Proven experience establishing cutting-edge security posture in regulated healthcare technology
- Excellent communication skills translating complex security risks into actionable advice for technical and non-technical stakeholders
- Expertise in compliance and regulatory areas: HIPAA, PHI, AKS, SOC 2, ISO, GDPR
- Flexibility for on-call support rotation
Bonus: Experience with Datadog, Sumologic, Torq, flare.io, GCP, Entitle, Okta, Orca, FlowSec, Prisma, or similar security tools.
