Apply on Employer Site

Doctronic · 19 hours ago

Information Security Engineer

New York City

Full-time

Onsite

Senior Level

$180K/yr - $240K/yr

7+ years exp

Doctronic is the first AI legally authorized to practice medicine, processing millions of consultations monthly with high accuracy. They are seeking an Information Security Engineer to maintain and strengthen their security posture, ensuring compliance with HIPAA and SOC 2 Type II as they scale operations.

Artificial Intelligence (AI)Generative AIHealth CareHealth DiagnosticsMachine LearningPersonal Health

Responsibilities

Maintain SOC 2 Type II compliance and manage ongoing audits with external assessors

Implement and monitor HIPAA technical safeguards across our infrastructure and applications

Conduct and coordinate regular penetration testing, vulnerability assessments, and security reviews

Complete vendor security reviews and respond to enterprise security questionnaires from health systems and payers

Implement and enforce security policies across engineering, operations, and business teams

Respond to security incidents with urgency and thoroughness, conducting post-incident analysis

Build security automation and monitoring to scale protection as the company grows

Collaborate with engineering teams to embed security best practices into the development lifecycle

Stay current on emerging threats, vulnerabilities, and regulatory requirements in healthcare technology

Qualification

Information SecuritySOC 2 complianceHIPAA complianceAWS securitySecurity certificationsPenetration testingVulnerability assessmentsSecurity policiesIncident responseCommunication skillsProblem-solvingCollaboration

Required

7+ years of information security experience in production environments

Healthcare or fintech background required—you understand regulated industry security requirements

Hands-on technical ability, not just policy and paperwork—you can read code, configure systems, and investigate incidents

Deep experience with SOC 2, HIPAA, or equivalent compliance frameworks

Familiarity with AWS security controls, IAM, encryption, and cloud security best practices

Strong communicator who can translate security requirements for technical and non-technical audiences

Proactive problem-solver who anticipates risks before they materialize

Collaborative partner who enables teams to move fast while staying secure