Cloud and AI Security Engineer

The Future of Healthcare Needs You Are you a security leader looking to make a real impact? As a Cloud & AI Security Engineer , you will serve as the primary technical architect and hands-on leader securing our enterprise cloud infrastructure, high-throughput network boundaries, and cutting-edge AI/ML product capabilities. In a high-growth healthcare SaaS environment handling sensitive Protected Health Information (PHI), security is both a core technical requirement and a business driver. You will bridge the gap between traditional cloud/network security and emerging AI risk management, collaborating directly with our 100+ members of the engineering and data science teams to build secure, scalable systems that earn the trust of major healthcare systems. Here's a sneak peek of what you'll be doing: Project Leadership: Manage large security projects, proactively enhance system defenses, and ensure compliance with regulations like HIPAA and the HITRUST r2 CSF. Automation & Development: Develop robust and secure code for security tooling, automation, and critical integrations to improve our security posture. Drive adoption and integration of Suki’s paved path security solutions across all business units. Collaboration: Partner with cross-departmental leaders in Suki to reduce the friction, increase speed-to-market and deliver secure-by-design products. AI/ML Security & Risk Assessment: Conduct security assessments and red-teaming on proprietary and third-party AI/ML models, LLMs, and data pipelines (testing for prompt injection, data poisoning, training data extraction, and model inversion). PHI & Data Privacy Governance: Implement guardrails to prevent PHI exposure in model training, vector databases, RAG architectures, and fine-tuning datasets. Cloud Posture & Architecture: Own the technical security architecture across our multi-cloud footprint (AWS / GCP / Azure), ensuring zero-trust principles and robust Cloud Security Posture Management (CSPM). Container & IaC Security: Secure Kubernetes clusters, container registries, and Infrastructure-as-Code (Terraform / CloudFormation) within CI/CD deployment pipelines. Identity & Access Management (IAM): Design and enforce least-privilege IAM policies, role-based access controls (RBAC), just-in-time (JIT) provisioning, and secrets management across cloud environments. Zero Trust & Network Segmentation: Design and enforce microsegmentation, VPC architecture, SASE/VPN solutions, and strict network isolation for multi-tenant health data architectures. Egress/Ingress Monitoring: Manage network security controls, intrusion detection/prevention systems (IDS/IPS), and Web Application Firewalls (WAF) to prevent unauthorized data exfiltration. Network Security Mastery: Proven track record in cloud network design, VPC routing, cloud firewalls, Zero Trust Network Access (ZTNA), and egress control. What we're looking for: 7+ years in Information Security, with 1+ years evaluating and remediating AI risk Hands-on experience securing AWS, GCP, or Azure environments using automated tools and native security services. Strong coding skills for developing secure tooling, automation, including leveraging agentic AI. Deep understanding of healthcare compliance standards and security protocols, including HIPAA / HITECH, HITRUST CSF, and NIST including a foundational understanding of NIST AI RMF in a cloud environment (GCP preferred). Demonstrated leadership ability with experience managing security projects and mentoring junior team members. Excellent communication and collaboration skills to lead technical discussions. What Makes Suki, Suki A mission that matters: Suki is making healthcare technology invisible and assistive—so clinicians can focus fully on patient care. A product that delivers: Our AI is used by real clinicians at real health systems — and it works. A team that gets it: We’re former Googlers, Apple engineers, Stanford docs, and healthcare veterans. Backed by believers: We’ve raised $165M from top VCs like Venrock, First Round, Flare, and March Capital. On a roll: Named by Fast Company as the Next Big Thing in Tech. Best Leadership Team by Comparably. Technology Innovation Award by Frost & Sullivan. Massive market: We’re disrupting a $30B+ industry, and our momentum is real. More Than Just a Job You’ll join a team of mission-driven builders who care deeply about what we do and how we do it. We believe in showing up with empathy, iterating constantly, and always putting clinicians first. We’re committed to building a team that reflects the diverse communities we serve — and to creating a culture of inclusion, belonging, and bold ambition. To all recruitment agencies: Suki does not accept agency resumes. Please do not forward resumes to Suki (or any related) jobs alias or directly to any Suki employees. Suki will not be responsible for any fees related to unsolicited resumes. Suki is an Equal Opportunity Employer. We are dedicated to building a company that fosters inclusion and belonging and reflects the diverse communities we serve across the country. We know we are stronger this way and we look forward to growing our team with these shared values. In compliance with the State of California Pay Transparency Law, the base salary range for this role is between $150k - $200k in CA. This range is not inclusive of any discretionary bonus or equity package. When determining a candidate’s compensation, we consider a number of factors including skillset, experience, job scope, and current market data.