Senior Security Engineer

About the role

Location: Boston, MA (Hybrid) / Remote · Department: Engineering

PathAI's mission is to improve patient outcomes with AI-powered pathology.

Our platform promises substantial improvements to the accuracy of diagnosis and the efficacy of treatment of diseases like cancer, leveraging modern approaches in machine learning and artificial intelligence. We have a track record of success in deploying AI algorithms for histopathology in translational research, pathology labs and clinical trials. Rigorous science and careful analysis is critical to the success of everything we do. Our team, composed of diverse employees with a wide range of backgrounds and experiences, is passionate about solving challenging problems and making a huge impact on patient outcomes.

At PathAI, we are constantly evaluating our tech stack and our current tools consist of:

- Languages & Frameworks: Python, JavaScript, Django / DRF, FastAPI, Vue

- Platform: EKS (Kubernetes), S3, RDS / PostgreSQL, SQS, MSK (Kafka)

- Tooling: GitLab CI/CD, Terraform, Docker, Datadog, Orca, AWS GuardDuty, Cloudflare, GCP

The Opportunity

We're looking for a Senior Security Engineer who thinks like a software engineer. You will make secure development the easy path at PathAI by embedding security into how our engineers design, build, and ship software, and by building the tools and automation that help them do their jobs securely without slowing down. Your goal is not just to find vulnerabilities, but to actively reduce the friction engineers experience when identifying, prioritizing, and resolving cybersecurity issues.

- You will champion secure coding practices across our Python and JavaScript codebases, partnering with engineering teams through design reviews, threat modeling, and code review.

- You will design and build internal tools, automation, and paved-road patterns (e.g., secure libraries, CI/CD guardrails, pre-commit checks, self-service workflows) that help engineers write and ship secure software by default.

- You will own and continuously improve security tooling in the SDLC, including SAST, DAST, SCA/dependency scanning, secrets detection, container and IaC scanning, and tune it to maximize signal and minimize noise.

- You will streamline how cybersecurity issues are triaged, tracked, and remediated, making findings actionable, well-prioritized, and integrated into the tools engineers already use (GitLab, Orca, AWS GuardDuty, Jira, Bugbounty).

- You will collaborate with product, infrastructure, machine learning, and IT teams to secure our cloud-native SaaS platform on AWS and Kubernetes.

- You will drive and uphold high engineering standards, bringing consistency to the codebases and pipelines you encounter and ensuring security controls are adequately reviewed, tested, and integrated.

- You will foster a culture of continuous learning by mentoring teammates, delivering secure coding guidance and training, and sharing technical knowledge.