Skip to content
CV Rocket
Get started
How it worksThe enginePricingBlogContactSign in

Open nowPosted 18 hours ago

Senior Security Engineer

PathAI10 open roles

Pay
$127,500 – $195,500 a year
Where
Boston, MA (Hybrid)
Work mode
Hybrid
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowSenior Security EngineerPathAI · Boston, MA (Hybrid)

  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on PathAI's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

13.5% of postings close within 7 days. Measured by our own scanner across the market. PathAI postings stay open a median of 35 days.

Share of postings closed within
  1. 2.3%1 day
  2. 4.6%3 days
  3. 13.5%7 days
  4. 21.8%14 days
  5. 36.6%30 days
  6. 58.9%60 days
This job: posted 18 hours ago

PathAI median: 35 days open

The posting

Location: Boston, MA (Hybrid) / Remote · Department: Engineering

PathAI's mission is to improve patient outcomes with AI-powered pathology.

Our platform promises substantial improvements to the accuracy of diagnosis and the efficacy of treatment of diseases like cancer, leveraging modern approaches in machine learning and artificial intelligence. We have a track record of success in deploying AI algorithms for histopathology in translational research, pathology labs and clinical trials. Rigorous science and careful analysis is critical to the success of everything we do. Our team, composed of diverse employees with a wide range of backgrounds and experiences, is passionate about solving challenging problems and making a huge impact on patient outcomes.

At PathAI, we are constantly evaluating our tech stack and our current tools consist of:

  • Languages & Frameworks: Python, JavaScript, Django / DRF, FastAPI, Vue
  • Platform: EKS (Kubernetes), S3, RDS / PostgreSQL, SQS, MSK (Kafka)
  • Tooling: GitLab CI/CD, Terraform, Docker, Datadog, Orca, AWS GuardDuty, Cloudflare, GCP

The Opportunity

We're looking for a Senior Security Engineer who thinks like a software engineer. You will make secure development the easy path at PathAI by embedding security into how our engineers design, build, and ship software, and by building the tools and automation that help them do their jobs securely without slowing down. Your goal is not just to find vulnerabilities, but to actively reduce the friction engineers experience when identifying, prioritizing, and resolving cybersecurity issues.

  • You will champion secure coding practices across our Python and JavaScript codebases, partnering with engineering teams through design reviews, threat modeling, and code review.
  • You will design and build internal tools, automation, and paved-road patterns (e.g., secure libraries, CI/CD guardrails, pre-commit checks, self-service workflows) that help engineers write and ship secure software by default.
  • You will own and continuously improve security tooling in the SDLC, including SAST, DAST, SCA/dependency scanning, secrets detection, container and IaC scanning, and tune it to maximize signal and minimize noise.
  • You will streamline how cybersecurity issues are triaged, tracked, and remediated, making findings actionable, well-prioritized, and integrated into the tools engineers already use (GitLab, Orca, AWS GuardDuty, Jira, Bugbounty).
  • You will collaborate with product, infrastructure, machine learning, and IT teams to secure our cloud-native SaaS platform on AWS and Kubernetes.
  • You will drive and uphold high engineering standards, bringing consistency to the codebases and pipelines you encounter and ensuring security controls are adequately reviewed, tested, and integrated.
  • You will foster a culture of continuous learning by mentoring teammates, delivering secure coding guidance and training, and sharing technical knowledge.
  • You will contribute to a SaaS platform ensuring reliability, data integrity, protection of sensitive health data, and compliance with industry standards.
  • You will collaborate with clinical, QA, and regulatory teams to ensure security activities meet validation expectations and support audits and inspection readiness.

Who You Are:

(Required)

  • You have a BS in Computer Science, Software Engineering, Cybersecurity or closely related technical field.
  • You have 5+ years of full life cycle development and/or application security engineering experience.
  • You have a strong, hands-on understanding of secure coding practices and common vulnerability classes (e.g., OWASP Top 10, CWE), and can explain both the risk and the fix to developers.
  • You have demonstrated experience building tools and automation that improve developer workflows, ideally in Python.
  • You have demonstrated experience integrating security tooling (SAST, DAST, SCA, secrets scanning, container scanning) into CI/CD pipelines.
  • You have demonstrated the ability to take on complex tasks, learn quickly and work in a proactive manner.
  • You have a demonstrated ability to collaborate with a distributed team and to work autonomously on projects; You have demonstrated problem-solving skills and the ability to work in a fast-paced, agile environment.
  • You have strong interpersonal and communication skills, with the ability to attend client-facing meetings and explain technical concepts to non-experts.
  • You have demonstrated cloud platform experience (AWS).

Preferred:

  • You have experience managing cybersecurity and risk in a controlled or regulated environment (e.g., FDA-regulated medical device software, IEC 62304, ISO 13485, ISO 27001, NIST, SOC 2, HIPAA).
  • You have an advanced degree or relevant security certification (e.g., OSCP, GWAPT, CSSLP, CISSP).
  • You have experience working in the healthtech industry, including working with HL7, HL7 FHIR, or DICOM.
  • You have experience with threat modeling, vulnerability management programs, and risk-based prioritization of findings.
  • You have hands-on experience with CI/CD tools, e.g. GitLab CI.
  • You have demonstrated knowledge of containerization technologies like Docker and container orchestration tools like Kubernetes, including securing them.
  • You have knowledge of some IaC framework (e.g., Terraform) and experience applying policy-as-code or IaC security scanning.
  • You have experience with cloud security tooling and practices (IAM, network segmentation, logging and monitoring, CSPM).
  • You have excellent organizational skills and the ability to prioritize and manage multiple projects efficiently.

This is either a remote position or a hybrid position based in Boston, MA. Relocation benefits are not available for this position.

The expected salary range for this position based on the primary location Boston, MA is $127,500 - $195,500. Actual pay will be determined based on experience, qualifications, geographic location, and other job-related factors permitted by law.

PathAI is an equal opportunity employer. It is our policy and practice to employ, promote, and otherwise treat any and all employees and applicants on the basis of merit, qualifications, and competence. The company's policy prohibits unlawful discrimination, including but not limited to, discrimination on the basis of Protected Veteran status, individuals with disabilities status, and consistent with all federal, state, or local laws.

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against PathAI's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.

  3. We apply on PathAI's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.

  4. Every reply, sorted

    PathAI's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.

  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

Get the CV for this job
By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.