Security Engineer, Cloud & Product Security

Building Healthcare That Remembers

Every time you call a doctor's office, the system forgets you the moment you hang up. You wait on hold, explain everything from scratch, get bounced between lines, and hope someone follows up. Everyone has felt this. No one should have to.

At Assort Health, we're building one continuous conversation for every patient. An AI agent that knows who you are, remembers how you like to be reached, and carries that context from your first symptom to your full recovery. What began as the first voice AI agent to schedule a specialty appointment has become the largest proprietary specialty dataset in healthcare: 240 million patient interactions, 62,000 care protocols, 1.6 million decision pathways.

We went from 15 people in 2025 and will cross 250 by the end of 2026. Revenue is up 20x in 15 months and we've raised $222 million, including a recent $120 million Series C at a $1.2 billion valuation. We've also been named to the Forbes Cloud 100 and the 2026 Enterprise Tech 30 as the only healthcare AI company on the list!

Healthcare spends $1.1 trillion a year on administration instead of care. If you want to help change that,

We are looking for a Security Engineer to help build and strengthen security foundations from the ground up in a fast-moving startup environment, with a primary focus on cloud security and product security. This is a strong opportunity for someone at a mid point in their career who brings solid experience in cloud security and product security and is excited to work across these areas as the company scales.

The role is designed for someone who wants meaningful ownership, broad exposure within cloud and product security, and the chance to help shape how security operates as the company matures. You will partner closely with teams across the organization, help close foundational gaps, and contribute to building a more robust, continuous cloud and product security program over time. This role is based in San Francisco and follows a 4-day in-office working model.

• Help build and strengthen the company's cloud security and product security programs, with a focus on practical improvements that strengthen overall security maturity.

• Own cloud and infrastructure security initiatives, helping identify gaps, improve configurations, and support a secure environment in a primarily cloud-based setup.

• Lead product security work, including reviewing code or infrastructure patterns, identifying security issues, and partnering with engineering on remediation.

• Support detection and response efforts as they relate to cloud environments, helping establish monitoring and related operational security processes as internal capabilities are developed.

• Collaborate with internal stakeholders across the organization to implement cloud and product security projects, improve coverage, and drive progress on high-priority initiatives.

• Assist with security efforts related to SOC 2 and help translate immediate audit-driven needs into longer-term, sustainable cloud and product security practices.

• Evaluate and help implement security tooling for cloud and product security, with the flexibility to explore a range of approaches, including modern platforms, open-source options, and AI-enabled tools where appropriate.

• Take ownership of hands-on technical work, scripting, and automation tasks that help the team move quickly and reduce manual effort.

• A security profile with strong exposure to cloud security and product security, rather than a narrow specialization elsewhere.

• Strong interest in infrastructure and cloud security, with the ability to understand technical environments and identify meaningful security improvements.

• Comfort working in a fast-paced startup environment where priorities can shift and the workload can be intense.

• A high degree of ownership, autonomy, and initiative, with the ability to make progress in environments that are still being built.

• Willingness to learn quickly, stay open-minded, and adapt to new projects or unfamiliar problem spaces as business needs evolve.

• Ability to work cross-functionally and build productive relationships with teams across the company.

• Good judgment when balancing immediate cloud and product security needs with longer-term program development.

• A practical, hands-on approach to security work, with interest in solving real operational problems rather than working only at a policy level.

• Seeking 4-6 years or more of relevant experience.

• Experience in product security and/or cloud infrastructure security.

• Background in cloud security is important; experience with GCP is preferred, though candidates with strong AWS experience are also encouraged to apply.

• Ability to perform technical security work such as reviewing code, assessing infrastructure for gaps, and supporting security automation through scripting.

• Familiarity with environments that rely on modern cloud and SaaS tooling.

• Experience in a startup or…