Thoughtful.ai builds role-based AI agents and an automation platform that uses LLMs, NLP, OCR, and RPA to automate healthcare revenue-cycle tasks such as claims processing, eligibility verification, and payment posting.
<div class="content-intro"><p>SmarterDx is transforming how health systems use clinical AI to capture the full value of patient care delivered. Built by physician-data scientists and trained on clinically-validated EHR data, our clinical AI platform interprets the nuances behind every patient story and makes clinically-sound recommendations for revenue cycle teams — helping hospitals recover earned revenue, improve quality metrics, reduce denials, and streamline revenue cycle operations. As a Smartian, you’ll help build technology that makes healthcare more accurate, sustainable, and effective for everyone. Learn more at <span><a href="http://smarterdx.com/careers" target="_blank">smarterdx.com/careers</a></span>.</p></div><p><strong>Role</strong></p> <p>SmarterDx Security Engineering has a broad scope: AI, cloud, and enterprise security, plus reviews of new designs and code across the company. We are a small team, and each engineer owns a domain. This role is our senior technical anchor for the two areas where we most need depth as the team grows: AI security and threat detection and response.</p> <p>On the AI security side, you will own how SmarterDx adopts AI and agentic tooling safely. That includes the guardrails for agentic access to our cloud and data, the security of the AI and ML workloads in our product, and the standards other engineering teams follow so that most AI adoption can happen without a security engineer in the room. On the detection side, you will own our detection platform (Panther), our detection strategy and coverage, and our incident response readiness. As the most senior security IC on the team, you will also be a resource across cloud and code security reviews, and you will mentor teammates who are still building their security depth.</p> <p><em>**This role is fully remote within the US**</em></p> <p><strong>What You’ll Do</strong></p> <ul> <li>Own our approach to AI and agentic security: guardrails for agentic access to cloud and data, and the security of the AI and ML workloads in our product.</li> <li>Publish the org's AI-security standard and drive its adoption by other engineering teams.</li> <li>Own our detection platform (Panther): detection strategy and coverage across cloud, container, and SaaS log sources, and the standards that keep detections high-signal as we grow.</li> <li>Own incident-response readiness: the plan, the playbooks, and tested tabletops tied to the HIPAA breach-notification timeline, and help lead response when a real incident happens.</li> <li>Lead complex security work across teams from start to finish, resolving ambiguity and coordinating with Platform, Engineering, and Compliance.</li> <li>Act as the senior security resource across cloud security and security reviews, and the security expert other engineering teams seek out for guidance on high-stakes decisions.</li> <li>Mentor teammates who are growing their security depth, set team standards for detection authoring and code review, and help raise our interview and hiring bar.</li> <li>Build and grow security automation that gives a small team more reach, and contribute to the tooling the team runs on.</li> <li>Take part in architecture reviews and threat modeling on our highest-risk designs, and communicate the resulting security architecture so the whole team can understand it and build on it.</li> </ul> <p><strong>What You Bring</strong></p> <ul> <li>8+ years in security and software engineering, with deep hands-on experience in AWS and cloud-native infrastructure, including working competence with containerized workloads (EKS) and infrastructure-as-code (Terraform).</li> <li>A track record of leading complex security work across teams and making other engineers more effective.</li> <li>Depth in AI and agentic security: securing LLM applications, agentic frameworks, and MCP, plus prompt-injection and agentic-access defenses.</li> <li>Depth in threat detection engineering: designing, authoring, and tuning detections in a modern SIEM, and reasoning about coverage against real threats.</li> <li>Incident-response experience, including building the plan and running the response.</li> <li>The ability to write production code (Python, Go, or TypeScript) and build security tooling, not only configure products.</li> <li>Strong writing and communication; you can publish a standard other teams adopt and explain a hard design to a non-security audience.</li> <li>Working knowledge of SOC 2 and HIPAA, and the judgment to design controls that hold up without stalling delivery.</li> <li>Experience mentoring and leveling up other engineers.</li> </ul> <p><strong>Nice To Haves</strong></p> <ul> <li>Recognized AI-security work: published standards or research, contributions to AI-security tooling, or red-teaming of AI/LLM systems.</li> <li>Startup experience, especially in health tech or another regulated, data-sensitive environment.</li> <li>Deeper specialization in container security (Kubernetes/EKS, Helm) or in infrastructure-as-code and policy-as-code, beyond working competence.</li> <li>Experience consolidating or retiring a security platform with a measurable cost or coverage result.</li> </ul> <p><strong>Our Tech Stack</strong></p> <ul> <li>Cloud and infrastructure: AWS, Kubernetes (EKS), Terraform, Postgres</li> <li>Detection and security tooling: Panther (SIEM), GuardDuty, AWS Config, Wiz, Snyk, GitHub Advanced Security, CrowdStrike, Nightfall, Drata</li> <li>Languages: Go, Python, TypeScript</li> <li>AI and automation: Claude, MCP, and agentic tooling used across engineering</li> </ul> <h3><strong>Compensation</strong></h3> <p><em>$230k to 250k base salary</em></p> <p><em>#LI-Remote</em></p> <p> </p><div class="content-conclusion"><h3>Benefits</h3> <ul class="p-rich_text_list p-rich_text_list__bullet p-rich_text_list--nested" data-stringify-type="unordered-list" data-list-tree="true" data-indent="0" data-border="0"> <li data-stringify-indent="0" data-stringify-border="0"><strong