Cloud & AI Security Engineer III

What we want to accomplish and why we need you

Suki is a leading technology company that provides AI voice solutions for healthcare. Its mission is to reimagine the healthcare technology stack, making it invisible and assistive to lift the administrative burden from clinicians. Its flagship product is Suki Assistant, an AI assistant that uses generative AI to automatically create clinical documentation by ambiently listening to patient-clinician conversations. Suki helps clinicians complete notes 72% faster on average, assists with other tasks including coding and answering questions, and generates incremental revenue for organizations, delivering a 9X ROI in year 1. Suki also offers its proprietary AI and speech platform, Suki Platform, to partners who want to create best-in-class ambient and voice experiences for their solutions. Clinicians that use Suki already spend over 70% less time on administrative tasks, and we’re striving to do even better. Come and join us! 

We are a user-driven company and are committed to making sure every pixel of our product is in service of the doctors. We’re a team of technologists, clinicians, and industry experts working together to push the limits on technology used in medicine. We’re confident enough to move fast and talented enough not to break things.

Are you a security engineer looking to make a real impact? 

As a Cloud & AI Security Engineer III, you are charged with protecting Suki’s cloud infrastructure, data pipelines, high-throughput network boundaries, and cutting-edge AI platform and product capabilities by continuing to mature Suki’s security posture. 

In a high-growth healthcare SaaS environment handling sensitive Protected Health Information (PHI), security is both a core technical requirement and a business driver. You will bridge the gap between traditional cloud/network security and emerging AI risk management, partnering closely with Software Engineers and Machine Learning Engineers to embed security in the development lifecycle, ensuring our applications and machine learning models are secure by design. In this role, you will champion a collaborative security culture, utilizing modern cloud security platforms to monitor risks, safeguard patient health information (PHI), and maintain continuous regulatory compliance.

Here's a sneak peek of what you'll be doing:

• Leadership: Manage large security projects, proactively enhance system defenses, and ensure compliance with regulations. Act as a trusted advisor by partnering with cross-departmental leaders to reduce friction, increase speed-to-market and deliver secure-by-design products and support.
• Collaboration: Integrate security guardrails natively into processes, CI/CD pipelines, APIs, and workflows to block issues; then, partner with those teams to interpret, prioritize, and determine the best option for remediating any identified issues.
• Cloud Posture & Architecture: Help manage the technical security architecture across our multi-cloud footprint (AWS / GCP / Azure), ensuring zero-trust principles and robust Cloud Security Posture Management (CSPM). 
• Container & IaC Security: Secure Kubernetes clusters, container registries, and Infrastructure-as-Code (Terraform / CloudFormation) within CI/CD deployment pipelines.
• Automation & Development: Develop robust and secure code for security tooling, automation, and critical integrations to improve our security posture. Drive adoption and integration of Suki’s paved path security solutions across all business units.
• AI/ML Security & Risk Assessment: Conduct security assessments and red-teaming on proprietary and third-party AI/ML models, LLMs, and data pipelines (testing for prompt injection, data poisoning, training data extraction, and model inversion).
• PHI & Data Privacy Governance: Implement guardrails to prevent PHI exposure in model training, vector databases, RAG architectures, and fine-tuning datasets.
• Zero Trust & Network Segmentation: Design and enforce micro-segmentation, VPC architecture, SASE/VPN solutions, and strict network isolation for multi-tenant health data architectures.
• Egress/Ingress Monitoring: Manage network security controls, intrusion detection/prevention systems (IDS/IPS), and Web Application Firewalls (WAF) to prevent unauthorized data exfiltration. Ensure appropriate logging and alerting are active and monitored.
• Network Security Mastery: Proven track record in cloud network design, VPC routing, cloud firewalls, Zero Trust Network Access (ZTNA), and egress control.

What we're looking for:

• 6+ years in Information Security, with 1+ years evaluating and remediating AI risk
• Hands-on experience securing AWS, GCP, or Azure environments using automated tools and native security services.
• Strong coding skills for developing secure tooling, automation, including leveraging agentic AI.
• Expertise with secure coding practices, API security, and managing to OWASP Top 10 vulnerabilities and familiarity with OWASP Top 10 for LLMs and Agentic AI. 
• Deep understanding of healthcare compliance standards and security protocols, including HIPAA / HITECH, HITRUST CSF, and NIST including a foundational understanding of NIST AI RMF in a cloud environment (GCP preferred).
• Demonstrated leadership ability with experience managing security projects and mentoring junior team members.
• Excellent communication and collaboration skills to lead technical discussions.

Tell me more about Suki

• On a roll: Named by Fast Company as one of the most innovative companies, named Google’s Partner of the Year for AI/ML, named by Forbes as one of the top 50 companies in AI .
• Great team: Founded, managed, and backed by successful tech veterans from Google and Apple and medical leaders from UCSF and Stanford. We have technologists and doctors working side-by-side to solve complex problems.
• Great investors: We’re backed by Venrock, First Round Capital, Flare Capital, March Capital, Hedosophia and others. With our $165M raised so far, we have the resources to scale.
• Huge market: Disrupting a massive, growing $30+ billion market for transcription, dictation, and order-entry solutions. Our vision is to become the voice user interface for healthcare, relieving the administrative burden on doctors instead of adding to it.
• Great customers: Our solutions are used in health systems and clinics across the country, supporting clinicians across dozens of specialties.  Check out what one of our users says about how Suki has helped his practice.
• Impact: You’ll make an impact from day one. You’ll join a team working towards a shared purpose with a culture built upon deep empathy for doctors and passion for making their lives better. 

Suki is an Equal Opportunity Employer. We are dedicated to building a company that fosters inclusion and belonging and reflects the diverse communities we serve across the country. We know we are stronger this way, and we look forward to growing our team with these shared values.