About the Role
Curative is seeking a Principal Security Engineer to lead the security engineering function, defining platform strategy and driving hands-on implementation. This technical leadership role involves setting security standards across infrastructure, applications, and AI systems, and mentoring other engineers. The ideal candidate is passionate about building tools, comfortable with new technologies, and enables business operations through secure designs. This role will design, deploy, and maintain all tooling supporting Security Operations.
Responsibilities
- Own strategy and hands-on engineering for Detection and Response platforms, including onboarding and normalizing log sources from cloud, containers, endpoints, and SaaS.
- Build and maintain Security Orchestration, Automation, and Response (SOAR) tooling to improve response times and reduce analyst workload.
- Lead incident response for complex threats, including developing runbooks, driving post-incident improvements, and designing/running BCP/DR tabletop exercises.
- Embed security into the SDLC through threat modeling, secure design reviews, SAST/DAST tooling, and automated security gates in CI/CD pipelines.
- Own the vulnerability management program at host and application levels, tracking and driving remediation.
- Champion 'security as code' practices across engineering teams.
- Build AI-powered security tooling for threat detection, anomaly identification, automated triage, and AI-assisted post-mortem summarization.
- Define and implement the security model for LLM-based systems and internal AI tooling.
- Architect harness patterns to constrain LLM behavior and harden against prompt injection, indirect injection via RAG pipelines, and data exfiltration.
- Evaluate and govern AI tool adoption from a security and data-risk perspective.
- Own AWS security posture and enforce baselines across Linux/Windows, network devices, and enterprise SaaS.
- Engineer, configure, and operate EDR, DLP, and endpoint security programs.
- Provide IAM architecture expertise across identity and access systems.
- Mentor and develop junior and mid-level security engineers through design reviews, pairing, and direct feedback.
- Define and drive security engineering standards across the organization.
- Collaborate with IT operations, platform, and software teams to translate threat intelligence into detection and hardening priorities.
Requirements
- 8+ years in security engineering with demonstrated growth into technical leadership.
- Hands-on SIEM experience (DataDog, ELK, or equivalent).
- Deep AWS security and IAM expertise.
- Application security fundamentals: threat modeling, SAST/DAST, secure SDLC.
- Experience building with AI/LLM APIs and practical knowledge of LLM security risks.
- EDR, DLP, and vulnerability management experience.
- Experience with containerized workloads and Kubernetes security.
- Proven track record of mentoring engineers and raising team capability.
Skills
- SIEM
- AWS Security
- IAM
- Threat Modeling
- SAST
- DAST
- Secure SDLC
- AI/LLM APIs
- LLM Security
- EDR
- DLP
- Vulnerability Management
- Container Security
- Kubernetes Security
- Mentorship
- Security as Code
- Data Science
- Anomaly Detection
- HIPAA
- HITRUST
Location
- Remote
Work Type
- Remote
- Full-time
Experience Level
- Principal
- Technical Leadership
Education Level
- Bachelor's degree in a related field or equivalent experience.
Benefits
- Curative Health Plan (100% employer-covered medical premiums for employee, 50% for dependents).
- $0 copays and $0 deductibles (with completion of Baseline Visit).
- Preventive and primary care.
- Mental health support.
- One-on-one care navigation.
- Chronic condition programs.
- Maternity and family planning support.
- 24/7/365 Curative Telehealth.
- Pharmacy benefits.
- Comprehensive dental and vision coverage.
- Employer-provided life and disability coverage with supplemental options.
- Flexible spending accounts.
- Generous PTO policy.
- 11 paid annual company holidays.
- 401K for full-time employees.
- Generous 8–12 weeks paid parental leave.
About the Company
- Curative is building the future of health insurance with a first-of-its-kind employer-based plan designed to remove financial barriers and make care truly accessible.
- The plan features one monthly premium with $0 copays and $0 deductibles.
- Backed by $150M in Series B funding and a valuation of $1.275B, Curative is scaling rapidly.
- The company is investing in AI-powered service, deeper member engagement, and a smart network for today’s workforce.
- Curative's mission is to ensure healthcare is accessible and usable.
- The team moves fast, experiments boldly, and cares deeply.
Equal Opportunity
- Everyone on our team should be prepared to work with and supportive of a variety of backgrounds, roles, and needs.
- Our organization is built on trust and mutual respect.
