Security Engineer

The posting, as Latent wrote it

ABOUT LATENT

Latent is the enterprise pharmacy intelligence platform, powered by a clinical agentic engine, that enables health systems to grow their pharmacy operations and serve more patients. One engine works across the pharmacy journey to identify patients who qualify for care, improve medication access, capture eligible prescriptions and support patients throughout treatment. Latent’s platform enables more than 60 leading health systems that collectively serve an estimated 70 million people. Founded by Sriram “Sri” Somasundaram and Rishabh Jain, Latent has raised $80 million from Transformation Capital, Spark Capital, Conviction, General Catalyst, Y Combinator, and others.

THE ROLE

We’re building the intelligence layer of American healthcare. Our systems sit directly in critical workflows and power how clinical AI is delivered and used in practice. You’ll be working on securing all aspects of Latent’s code, cloud, AI, and IT systems. You will be partnering with all Latent employees across engineering, product, legal, and GTM to safely enable Latent employees to move quickly without sacrificing security and compliance.

WHAT YOU'LL DO

You’ll be a Security generalist, helping define, lead, and execute the roadmap in all aspects of Security. Here are some of the areas you will work in:

• Cloud Security Mature and harden Latent’s cloud environment from a security and compliance standpoint into a secure-by-default stance so developers can ship code with confidence and the Infrastructure team doesn’t have to worry that their next Terraform apply will put everything on the open internet.
• AI Security Employees at Latent use a lot of AI. Help us give all of our employees access to the latest and greatest AI-powered tools in a secure and compliant way so our agents don’t run amok and do the wrong thing.
• Data Security Latent’s business thrives on giving our users deep insights into their patient data, their pharmacy performance, and how our AI is performing. Help us secure our data warehouse so that our internal employees and customers get the insight they need without sacrificing our commitment to patient security and privacy.
• Application and Product Security Latent’s developers ship a lot of code. Help us come up with ways to automate all aspects of the SDLC from a security perspective to ensure security is built in instead of being a bolt-on afterwards. In addition, as Latent plans the next iteration of its application and agentic platform, help us come up with the right security requirements for new product features and enhancements.
• IT Security Help our hard-working IT folks secure Latent employee devices and applications. Automate security around IT and business applications including user lifecycle provisioning, just-in-time access, elevated access provisioning, and device hardening to ensure employees can do their job securely without thinking about security.
• Incident Detection and Response

[…]
coding wizard Harry, but you do need to understand basic engineering principles to give your coding agent positive feedback if it spits out the wrong solution)

• You’ve built out IAM workflows (Okta, SSO, SAML, JIT provisioning) to give employees just the right amount of access to get their job done
• You’ve designed and rolled out managed settings for AI tools and coding agents to make sure employees have a good sandbox to work in to get their jobs done with AI
• You have collaborated with developers to help them write secure code and secure features.
• You’ve helped harden AWS cloud and CI/CD environments (Think well-scoped IAM roles, hardening cloud environments to CIS standards, picking the right CSPM and driving down a findings backlog ect..)
• You’ve helped build and maintain a vulnerability management program all the way up the stack (Server/Container/3rd Party OSS/Custom Code)
• You’ve automated security and compliance requirements for MacOS and BYOD endpoints using an MDM
• You understand your way around a security alert, security investigation, and can write and tune detections that are relevant to Latent’s environment

NICE TO HAVE

• You have experience working at an early stage startup doing security
• You’ve worked with healthcare data before and can speak a little HIPAA
• You’ve participated in or built controls for SOC2 audits

WHY JOIN LATENT

• Backed by top-tier investors including General Catalyst, Conviction, and Y Combinator
• Work alongside a high-caliber team building products our healthcare partners love
• Work on mission-critical problems at the intersection of AI and healthcare
• Real ownership and visibility
• High-impact role on a small, fast-growing team

BENEFITS

• Competitive compensation, including meaningful equity
• Medical, dental, and vision insurance for employee and dependents
• Flexible PTO policy
• Paid parental leave
• Fertility and family-building stipend through Carrot