Skip to content
CV Rocket
Get started
How it worksThe enginePricingBlogContactSign in

Open nowPosted 2 days agoWe saw it 2 min after it went up

Senior Security Engineer

Sage Care8 open roles

Pay
$145,000 – $175,000 a year
Where
HQ
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowSenior Security EngineerSage Care · HQ

  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on Sage Care's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

13.4% of postings close within 7 days. Measured by our own scanner across the market. Sage Care postings stay open a median of 44 days.

Share of postings closed within
  1. 2.2%1 day
  2. 4.6%3 days
  3. 13.4%7 days
  4. 21.6%14 days
  5. 36.2%30 days
  6. 59.0%60 days
This job: posted 2 days ago

Sage Care median: 44 days open

The posting

ABOUT SAGE CARE

Sage Care is a fast growing, early stage healthcare startup transforming care navigation with AI. Our platform helps patients find the right care, enables providers to focus on the people who need them most, and improves access, quality, and economic outcomes at scale.

Founded by leaders from Apple, Uber, and Carbon Health, Sage Care is backed by top tier investors including General Catalyst and Chelsea Clinton. We work with health systems across the U.S. and have expanded internationally to the MENA region.

ABOUT THE ROLE

Hospitals trust Sage with patient data, and every new health system brings security reviews and audits. As our first dedicated Security Engineer, you'll own security and compliance across our platform, applications, identity, and SaaS footprint, and you'll share ownership of the GCP and Kubernetes infrastructure that runs it. You'll set the guidelines engineering and product teams follow, implement the controls that matter most yourself, and be the technical voice in front of customer security teams.

You'll report to the Head of Core Platform, Infrastructure and Security, who serves as Sage's Security Officer and HIPAA Lead.

WHAT YOU'LL DO

- Run our compliance program: SOC 2 Type II, HIPAA safeguards, risk assessments, vendor BAAs, and pen test remediation, with Vanta as the system of record. Extend it to HITRUST and international requirements as we grow.

- Lead customer security reviews, questionnaires, and audits with hospital IT and security teams across all customers, in the U.S. and MENA.

- Set security guidelines for engineering: secure design review for new services, application security standards, dependency and code scanning, and secrets handling. Decide what must be done and work with teams to get it done.

- Own governance of identity and access: Auth0, Google Workspace, SSO and MFA, access reviews, and least privilege across cloud and SaaS.

- Build and operate infrastructure alongside the DevOps team: GCP, GKE, Terraform, and CI/CD, with IAM hardening, network controls, and policy as code built in.

- Govern PHI: access policy, audit logging, retention, and security review of new data flows, including BigQuery.

- Own detection and incident response: logging and alerting, runbooks, and the breach notification process.

- Secure our AI agents: threat model prompt injection, tool misuse, and sensitive data disclosure in voice and LLM workflows.

WHAT WE'RE LOOKING FOR

Required

- 5+ years in security engineering or infrastructure with security ownership.

- Hands on SOC 2 and HIPAA experience in production environments, with Vanta, Drata, or similar.

- Application security experience: secure code review, threat modeling, and CI/CD scanning.

- Identity and access management experience with Auth0, Okta, or similar, and SSO/MFA across SaaS.

- Strong GCP or AWS security, plus Kubernetes and Terraform in production.

- Proficient in Python, and able to read and review code in TypeScript and Java; Rust a plus.

- Clear communication with engineers, auditors, and customer security teams; comfortable leading customer facing reviews.

- Stand up auditable, policy based access control and dynamic secrets management (HashiCorp Vault or equivalent) for services, infrastructure, and engineers.

Nice to Have

- Healthcare experience handling PHI.

- HITRUST, ISO 27001, or UAE or other international healthcare compliance.

- Securing LLM or voice AI products.

- Experience as an early or first security hire at a startup.

HOW WE WORK

At Sage Care, our values shape how we build, collaborate, and serve.

- Do Good Through Serving People: We serve users, teammates, and communities with integrity, compassion, kindness, and optimism.

- Innovate with Safety, Evidence, and Transparency: We move quickly while prioritizing trust, safety, ethical decision making, and evidence based approaches.

- Lead with Curiosity and Kindness: We ask questions before making assumptions and approach discovery, debate, and problem solving with humility and care.

- We, Not Me: We believe the best work happens through collaboration, mutual respect, and constructive feedback.

- Efficiency and AI in All We Do: We use automation and AI thoughtfully to work smarter, create leverage, and build better products.

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against Sage Care's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.

  3. We apply on Sage Care's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.

  4. Every reply, sorted

    Sage Care's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.

  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

Get the CV for this job
By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.