Security Engineer

Latent is the enterprise pharmacy intelligence platform, powered by a clinical agentic engine, that enables health systems to grow their pharmacy operations and serve more patients. One engine works across the pharmacy journey to identify patients who qualify for care, improve medication access, capture eligible prescriptions and support patients throughout treatment. Latent’s platform enables more than 60 leading health systems that collectively serve an estimated 70 million people. Founded by Sriram “Sri” Somasundaram and Rishabh Jain, Latent has raised $80 million from Transformation Capital, Spark Capital, Conviction, General Catalyst, Y Combinator, and others.

We’re building the intelligence layer of American healthcare. Our systems sit directly in critical workflows and power how clinical AI is delivered and used in practice. You’ll be working on securing all aspects of Latent’s code, cloud, AI, and IT systems. You will be partnering with all Latent employees across engineering, product, legal, and GTM to safely enable Latent employees to move quickly without sacrificing security and compliance.

You’ll be a Security generalist, helping define, lead, and execute the roadmap in all aspects of Security. Here are some of the areas you will work in:

• Cloud Security
  Mature and harden Latent’s cloud environment from a security and compliance standpoint into a secure-by-default stance so developers can ship code with confidence and the Infrastructure team doesn’t have to worry that their next Terraform apply will put everything on the open internet.

• AI Security
  Employees at Latent use a lot of AI. Help us give all of our employees access to the latest and greatest AI-powered tools in a secure and compliant way so our agents don’t run amok and do the wrong thing.

• Data Security
  Latent’s business thrives on giving our users deep insights into their patient data, their pharmacy performance, and how our AI is performing. Help us secure our data warehouse so that our internal employees and customers get the insight they need without sacrificing our commitment to patient security and privacy.

• Application and Product Security
  Latent’s developers ship a lot of code. Help us come up with ways to automate all aspects of the SDLC from a security perspective to ensure security is built in instead of being a bolt-on afterwards. In addition, as Latent plans the next iteration of its application and agentic platform, help us come up with the right security requirements for new product features and enhancements.

• IT Security
  Help our hard-working IT folks secure Latent employee devices and applications. Automate security around IT and business applications including user lifecycle provisioning, just-in-time access, elevated access provisioning, and device hardening to ensure employees can do their job securely without thinking about security.

• Incident Detection and Response
  Help the Security team investigate potential incidents, build detections that are specific to Latent’s environment, and work with our AI-native MDR service to improve accuracy around escalated incidents.
  

You’re a builder who holds yourself and others to high standards. You can design, develop, and create security automations and workflows using AI that can scale Latent’s security team.

• Ownership: You don’t hand off problems or wait for someone to tell you what to do. Find our gaps, risks, and vulnerabilities and implement the solution.

• Bias for Action: You won’t wait for someone else to solve a problem you’re in a position to solve.

• A Yes Mindset: Latent’s Security team is not a no factory. While we put our foot down when the risk is high, our goal is to find creative solutions that 1) Understand what an employee actually needs and 2) That balances speed and security.

• Automation Mindset: You’re always looking for ways to move faster by automating repetitive or manual work.

• Complexity Management: You’re good at planning and building the simplest solution that gets the job done, with an eye towards the future as Latent scales quickly. You can take a complex and large product and break it down into focused, iterative steps that incrementally make our security and compliance posture better.

• Product Focus: You’re comfortable working closely with the customers that use Latent’s security program: Latent’s employees! You love sitting alongside folks from all areas of the company, understanding their day to day, and crafting the perfect solution for them both now and in the future.

   

We really are looking for a little bit of a unicorn and someone who has done it all when it comes to security. If you’ve worked in multiple of these areas, this is the place for you!

• You aren’t afraid to use coding agents to contribute solutions directly to the code base! (You don’t have to be a coding wizard Harry, but you do need to understand basic engineering principles to give your coding agent positive feedback if it spits out the wrong solution)

• You’ve built out IAM workflows (Okta, SSO, SAML, JIT provisioning) to give employees just the right amount of access to get their job done

• You’ve designed and rolled out managed settings for AI tools and coding agents to make sure employees have a good sandbox to work in to get their jobs done with AI

• You have collaborated with developers to help them write secure code and secure features.

• You’ve helped harden AWS cloud and CI/CD environments (Think well-scoped IAM roles, hardening cloud environments to CIS standards, picking the right CSPM and driving down a findings backlog ect..)

• You’ve helped build and maintain a vulnerability management program all the way up the stack (Server/Container/3rd Party OSS/Custom Code)

• You’ve automated security and compliance requirements for MacOS and BYOD endpoints using an MDM

• You understand your way around a security alert, security investigation, and can write and tune detections that are relevant to Latent’s environment

• You have experience working at an early stage startup doing security

• You’ve worked with healthcare data before and can speak a little HIPAA

• You’ve participated in or built controls for SOC2 audits

• Backed by top-tier investors including General Catalyst, Conviction, and Y Combinator

• Work alongside a high-caliber team building products our healthcare partners love

• Work on mission-critical problems at the intersection of AI and healthcare

• Real ownership and visibility

• High-impact role on a small, fast-growing team

• Competitive compensation, including meaningful equity

• Medical, dental, and vision insurance for employee and dependents

• Flexible PTO policy

• Paid parental leave

• Fertility and family-building stipend through Carrot