Senior Security Engineer

About Aimbient

Help hospitals turn AI into better surgical outcomes — and build your career doing work that actually matters.

Aimbient (formerly Surgical Safety Technologies) is a mission-driven healthcare technology company engineering the future of procedural care. Our Aimbient Suite is an enterprise ambient AI platform that transforms procedural data into actionable intelligence to improve safety, quality, compliance, operational efficiency, and education.

Trusted by leading academic health systems across the U.S., Canada, and Europe, Aimbient is redefining how hospitals continuously improve care.

Founded in 2015, Aimbient is a private, Series B company headquartered across New York and Toronto, backed by leading healthcare and technology investors including Santé Ventures and U.S. Venture Partners. We're at an exciting stage of growth as we scale our AI platform across health systems worldwide.

The Role

We're looking for a Senior Security Engineer to take technical ownership of security across our cloud infrastructure, applications, and data systems. You'll work directly with our engineering team to strengthen the systems we operate today while shaping how security is built into our architecture, development practices, and infrastructure as we scale.

This is a hands-on role with broad scope: cloud and application security, data protection, detection and incident response, and security across CI/CD and infrastructure workflows. You'll have meaningful autonomy to identify risks, set priorities, and build the security practices and controls needed for a healthcare AI platform operating in complex hospital environments.

This is an on-site role based in our New York City office, five days a week. We're a close-knit team and value working together in person—it helps us collaborate effectively, make decisions quickly, and keep momentum high.

What You'll Do

Cloud & Infrastructure Security

• Own and continuously improve security controls across our AWS environment, including identity, networking, compute, and data infrastructure
• Strengthen service-to-service communication and cloud architecture patterns as the platform scales
• Improve secrets management, identity boundaries, and least-privilege access models
• Partner with engineering to embed security into CI/CD and infrastructure workflows
• Strengthen artifact integrity, dependency management, and build-time security controls

Application Security

• Partner with engineers to identify and address security risks across our Python/FastAPI services and APIs
• Identify and remediate vulnerabilities including authentication and authorization flaws, injection, SSRF, and other application-layer risks
• Embed secure-by-design patterns into new services, features, and architecture
• Help establish scalable application security practices, including security reviews and vulnerability management

Data Security

• Strengthen security across large-scale PostgreSQL environments and multiple production databases
• Improve access controls, encryption strategies, data protection, and auditability
• Ensure database changes are securely governed, reviewed, and executed using appropriate least-privilege controls
• Partner with engineering to protect sensitive healthcare data throughout its lifecycle

Observability & Detection

• Build and improve security monitoring and anomaly detection using Datadog and other observability capabilities
• Develop detection logic for suspicious behavior across services, infrastructure, and data access patterns
• Turn signals from logs, traces, and application telemetry into actionable security insights

Incident Response

• Lead technical investigations of security incidents and participate in postmortems
• Develop and maintain practical incident response playbooks for production systems
• Improve our ability to detect, investigate, contain, and learn from security events

What You'll Bring

• 5+ years of experience in security engineering, application security, cloud security, or a closely related field
• Strong, hands-on experience securing AWS environments in production
• Deep understanding of containerized systems
• Experience securing production database systems at scale, with strong knowledge of PostgreSQL security, access control, and governance
• Experience securing backend applications and APIs, ideally in Python or similar modern backend environments
• Familiarity with CI/CD systems such as GitHub Actions or equivalent from a security perspective
• Experience using observability and monitoring platforms such as Datadog to investigate or detect security issues
• Practical experience responding to security incidents in production environments
• Strong judgment and the ability to balance security, engineering velocity, and operational realities

Nice to Have

• Experience in healthcare or another regulated environment, including familiarity with HIPAA
• Experience with high-scale or high-ingestion data systems
• Knowledge of multi-account AWS architectures
• Experience working in safety-critical, compliance-heavy, or audit-heavy environments
• Experience helping establish or mature security practices within a growing engineering organization

Why Aimbient

You'll work on one of healthcare's hardest problems, where security isn't an abstract exercise—it directly supports technology used in real clinical environments.

This role offers the opportunity to have meaningful influence over how security engineering is done at Aimbient. You'll work directly with the engineers and leaders making technical decisions, have the autonomy to identify and prioritize the security problems that matter most, and help build practices that can scale with the company.

It's a role with real ownership, real technical challenges, and the opportunity to see the impact of your work as we bring AI into more hospitals around the world.

Compensation

The base salary range for this role is $160,000 -$180,000 per year. This range reflects the compensation Aimbient reasonably and in good faith expects to pay for this position at the time of posting. Where an individual offer falls within the range depends on job-related factors including experience, skills, and qualifications.

Life at Aimbient

We're a small, mission-driven team building technology that's already improving patient safety in hospitals around the world. You'll be close to the product, the people making decisions, and the impact of the work from day one.

• Equity in a growing Series B company
• Comprehensive health, dental, and vision coverage
• Flexible PTO
• 401(k) plan
• A collaborative, in-office culture with a tight-knit, cross-functional team
• A beautiful office in New York City's Financial District