> Markdown version of [/jobs/ext/2712716-founding-security-engineer](https://www.wearedevelopers.com/jobs/ext/2712716-founding-security-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Founding Security Engineer - **Company:** FORUS, INC. - **Location:** New York, NY, United States - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** Artificial Intelligence, Amazon Web Services, Software as a Service, Cloud Computing Security, Code Review, Data Flow Control, Key Management, Network Architecture, Software Engineering, Data Logging, Large Language Models - **Published:** September 4, 2026 - **Apply:** https://startup.jobs/founding-security-engineer-forus-8752292 ## About the Role * 7+ years in security engineering built on a strong software engineering foundation. You design and implement, not just review. * Deep, hands-on cloud security across AWS and/or GCP with real infrastructure-as-code experience. You have built security foundations, not just configured managed services. * Range across multiple security domains - infrastructure, application, identity, and detection and response - with the judgment to operate as the first and only security engineer. * Experience protecting sensitive data at scale; familiarity working with PHI and HIPAA is a strong plus. * Comfort designing security for LLMs and AI agents. * A track record of moving quickly, finding shortcuts, and going to unreasonable lengths to deliver on goals. * High NPS with your former teammates. ## Description As a Founding Security Engineer at Forus, you will own how we protect the sensitive healthcare data at the core of our business. We automate the access workflows that determine whether patients get the care they need, which means we operate on protected health information at scale. Earning the trust of providers, payers, and life sciences partners depends on getting security right, and you will build that foundation. This is a broad, deeply technical role. You will own cloud and infrastructure security across AWS and GCP, build security into the product, secure how our AI systems handle sensitive data, and stand up detection and incident response, including the audit trails that prove how protected data is accessed. As the first security engineer, you set the technical bar for how Forus builds securely as we scale. This is a demanding role, with a high level of autonomy and responsibility. You will be expected to act like an owner and commit yourself to Forus' success. If you are low-ego, hungry to learn, and excited about intense, impactful work that drives both company growth and accelerated career progression, we want to hear from you. If you join, you will: * Own cloud and infrastructure security (AWS, GCP): build guardrails, identity and network architecture, secrets management, and secure-by-default primitives. * Build security into the product: lead secure design and code reviews, harden authentication and authorization, and ship libraries and tooling that make the secure path the easiest one. * Own detection, logging, and incident response, including audit trails for how protected health information is accessed, and lead the technical response when something goes wrong. * Secure our corporate and identity surface: SSO, device and endpoint security, SaaS hardening, and access across the employee lifecycle. * Secure how our agentic AI systems handle sensitive data: designing isolation and data-flow controls and defending against leakage across our model pipelines. * Build the automation and "security as code" that lets engineers move fast, and implement the technical controls behind SOC 2, HIPAA, and HITRUST. * Partner with legal and GTM teams to translate compliance and customer requirements into controls that actually ship. ## Related Videos - [Are Code Reviews Worth It? Insights from 16 Years of Review Data](https://www.wearedevelopers.com/videos/1135-are-code-reviews-worth-it-insights-from-16-years-of-review-data) - [Crypto-secure Data Management with In-Database Blockchain](https://www.wearedevelopers.com/videos/632-crypto-secure-data-management-with-in-database-blockchain) - [This Machine Ends Data Breaches](https://www.wearedevelopers.com/videos/574-this-machine-ends-data-breaches) - [You can’t hack what you can’t see](https://www.wearedevelopers.com/videos/41-you-can-t-hack-what-you-can-t-see) - [Pragmatic Blockchain Design Patterns: Integrating Blockchain into Business Processes](https://www.wearedevelopers.com/videos/1579-pragmatic-blockchain-design-patterns-integrating-blockchain-into-business-processes) - [Build a CI/CD pipeline to automate code reviews and ensure code quality](https://www.wearedevelopers.com/videos/349-build-a-ci-cd-pipeline-to-automate-code-reviews-and-ensure-code-quality) ## Related Articles - [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [The Best X (Twitter) Accounts for Developers](https://www.wearedevelopers.com/magazine/294-the-best-x-twitter-accounts-for-developers) - [Dev Digest 120 - Apple and peers](https://www.wearedevelopers.com/magazine/455-dev-digest-120-apple-and-peers) - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing) - [Trustworthy AI Starts at Deployment: 5 Checks Before You Ship](https://www.wearedevelopers.com/magazine/753-trustworthy-ai-starts-at-deployment-5-checks-before-you-ship)