Senior Security Engineer

Elucid builds FDA-cleared AI software that analyzes cardiac CT scans to characterize plaque and predict heart attack and stroke risk. The world's best cardiologists use our output to make treatment decisions for real patients. As such, our platform is regulated as a Software as a Medical Device (SaMD) product by the FDA and we operate under HIPAA, ISO 13485, and ISO 27001. We're hiring a Senior Security Engineer to help mature and scale our security engineering program: You'll work across application security, cloud infrastructure, and regulatory compliance, contributing to secure SDLC practices, threat modeling, code and design reviews, CI/CD security testing, AWS hardening and audit other activities to allow Elucid ship secure code quickly within a regulated SDLC. We are looking for: 5+ years of experience in security engineering, application security, or a closely related software engineering role with a strong secure coding background, including fluency in cloud infrastructure security, common vulnerability classes (OWASP Top 10 and beyond), authentication, and cryptography fundamentals. Healthcare or regulated-industry experience is a plus, but not a requirement.