Senior Manager​/Manager, Security

Plenful is on a mission to transform healthcare operations from the inside out. Fresh off our $50M Series B and backed by Notable Capital, Bessemer Venture Partners, TQ Ventures, Susa/Kivu Ventures, and other leading investors, we’re building the category-defining AI automation platform that healthcare teams rely on to operate smarter, faster, and more efficiently. Our technology empowers healthcare operators across hospital and health systems, pharmacies and payors to eliminate manual work, reduce administrative burden, and improve compliance, all while unlocking critical revenue to fund programs for their in-need patient populations.

Built by healthcare operators for healthcare operators, Plenful is driven by a deep understanding of the challenges facing today’s care teams. We’re passionate about equipping healthcare workers with world‑class tools that deliver real, measurable impact, and we’re proud to serve 100+ leading health systems, pharmacies, and healthcare organizations across the country. If you’re excited to help shape the future of healthcare, we’d love to meet you.

This is an opportunity to lead and execute security at one of healthcare's fastest-growing AI companies.

• Define and execute a pragmatic security roadmap aligned with Plenful's product and business priorities.
• Lead a small security team and coordinate security work across Engineering, Product, IT, Legal, and Compliance.
• Personally own and execute critical security work while building scalable processes and automation.
• Prioritize security risks based on exploitability, business impact, customer commitments, and regulatory requirements.
• Create security processes that support rapid product development without slowing innovation.

• Establish and mature secure software development lifecycle practices across Engineering.
• Partner directly with engineers to identify, reproduce, prioritize, and remediate application vulnerabilities.
• Review application code and architecture, propose fixes, and contribute or validate security-related code changes where appropriate.
• Lead threat modeling, secure architecture reviews, penetration testing, vulnerability management, and remediation tracking.
• Integrate SAST, DAST, software composition analysis, secrets detection, and other security controls into CI/CD pipelines and developer workflows.
• Build reusable guardrails, secure coding patterns, and automation that make it easier for engineers to ship secure software.
• Define and implement security standards for AI-powered products and machine learning systems, including data protection, tenant isolation, prompt-injection risks, agent permissions, tool use, and continuous security evaluation.

• Build and operate security monitoring, detection, logging, alerting, and incident response capabilities.
• Triage security findings and incidents, lead investigations, coordinate containment and remediation, and drive postmortems to completion.
• Develop incident-response playbooks and lead tabletop exercises.
• Establish and operate a risk-based vulnerability-management program that consolidates findings, validates exploitability, assigns ownership and remediation SLAs, tracks exceptions, and drives issues through closure.
• Improve detection coverage and response readiness based on incidents, threat intelligence, and changes to Plenful's platform.

• Strengthen security across Plenful's AWS infrastructure.
• Improve identity and access management, secrets management, infrastructure hardening, endpoint security, and network security.
• Review Infrastructure as Code, Kubernetes, containers, and cloud architecture for security risks.
• Partn…