Security Operations Engineer

Position Summary

We are seeking our first dedicated Security Operations Engineer to establish and maintain the security foundations that will support Salma’s growth, protect sensitive patient information, and ensure compliance with healthcare and data protection regulations. This is a hybrid role spanning both security engineering and IT operations, ensuring security controls are implemented, monitored, and continuously improved. The Security Operations Engineer will work closely with Engineering, DevOps, and external advisors while providing independent oversight to ensure alignment with Salma’s security policies and regulatory frameworks.

Key Responsibilities

• Manage identity and access controls across systems and applications.
• Administer and review privileged accounts, ensuring compliance with segregation of duties.
• Own day-to-day privileged access, reducing executive dependency.
• Implement and manage monitoring and alerting tools for security events.
• Respond to and document security incidents in line with the Incident Response Plan.
• Conduct regular access reviews, vulnerability scans, and configuration checks.
• Administer employee devices, software, and secure network access.
• Support secure IT onboarding/offboarding processes (accounts, MFA, endpoint protection).
• Collaborate with DevOps to ensure secure deployment and configuration practices.
• Translate security advisor recommendations into implemented technical controls.
• Ensure compliance with HIPAA, SOC 2, HITRUST, ISO 27001, NIST requirements.
• Document security configurations, access logs, and audit trails.
• Review and approve security-sensitive configuration changes.
• Provide independent oversight for external-facing security decisions.
• Manage IT operations, including IT vendor relationships and administration of software and IT systems (Google Workspace, Slack, Zoom, etc..)

Required Qualifications

• 5 years of experience in IT security, security operations, or DevSecOps.
• Strong knowledge of identity and access management, MFA, and privilege management.
• Hands-on experience with endpoint security, logging/monitoring, and vulnerability scanning tools.
• Familiarity with compliance frameworks (HIPAA, SOC 2, ISO 27001, NIST, HITRUST).
• Ability to balance operational IT responsibilities with security enforcement.
• Excellent communication skills with a proven ability to work cross-functionally.

Preferred Qualifications

• Experience in healthcare, health tech, or other regulated industries.
• Security certifications such as CISSP, CISM, CISA, Security , GSEC.
• Familiarity with cloud security (AWS, GCP, Azure).
• Prior experience as the first security hire or building security programs from the ground up.

Company Mission & Vision

We are the brain health company of the future that integrates care delivery, technology innovation and research breakthroughs to better understand brain biology and diagnose, treat and ultimately cure brain disorders for all stages of life.

Compensation & Benefits

The compensation for this position includes:

• Base Salary: $195,000–$215,000, depending on experience, qualifications, and location.
• Incentives: Discretionary bonus and/or stock option grants based on company and individual performance.
• Benefits: Medical, dental, vision, PTO, and additional benefits.

We reserve the right to modify benefit offerings at any time, in accordance with applicable laws.

Work Authorization

Sponsorship for employment authorization may be considered on a case-by-case basis depending on the role and candidate qualifications.

Equal Opportunity & Accessibility Statement

We are committed to providing a workplace that is inclusive, respectful, and free from discrimination. We welcome applicants of all backgrounds and make employment decisions without regard to race, color, religion, sex (including pregnancy, childbirth, and related medical conditions), sexual orientation, gender identity or expression, national origin, ancestry, citizenship, age, physical or mental disability, medical condition, genetic information, marital status, military or veteran status, or any other characteristic protected by California or federal law.

In accordance with the California Fair Chance Act, we will consider qualified applicants with arrest and conviction records.

If you require a reasonable accommodation during the application or hiring process, please contact us directly—we’re happy to help.