Security Engineer, Detection & Response

Building Healthcare That Remembers Every time you call a doctor's office, the system forgets you the moment you hang up. You wait on hold, explain everything from scratch, get bounced between lines, and hope someone follows up. Everyone has felt this. No one should have to. At Assort Health, we're building one continuous conversation for every patient. An AI agent that knows who you are, remembers how you like to be reached, and carries that context from your first symptom to your full recovery. What began as the first voice AI agent to schedule a specialty appointment has become the largest proprietary specialty dataset in healthcare: 240 million patient interactions, 62,000 care protocols, 1.6 million decision pathways. We went from 15 people in 2025 and will cross 250 by the end of 2026. Revenue is up 20x in 15 months and we've raised $222 million, including a recent $120 million Series C at a $1.2 billion valuation. We've also been named to the Forbes Cloud 100 and the 2026 Enterprise Tech 30 as the only healthcare AI company on the list! Healthcare spends $1.1 trillion a year on administration instead of care. If you want to help change that, apply below.

We are looking for a Security Engineer to help build and strengthen security foundations from the ground up in a fast-moving startup environment, with a primary focus on detection and response. This is a strong opportunity for someone early in their career who brings a strong interest in security monitoring, incident response, and detection engineering and is excited to work across these areas as the company scales. The role is designed for someone who wants meaningful ownership, broad exposure within detection and response, and the chance to help shape how security operates as the company matures. You will partner closely with teams across the organization, help close foundational gaps, and contribute to building a more robust, continuous detection and response program over time. This role is based in San Francisco and follows a 4-day in-office working model. Flexible to hire remotely for the right candidate in the US.

Help build and operate the company's detection and response capabilities, including continuous monitoring, triage, investigation, containment, and remediation of security events across a diverse set of networks and infrastructure. Support operational rigor and incident readiness by helping build and maintain incident playbooks, on-call and escalation paths, tabletop exercises, and continuous improvement of response quality and speed. Improve detection quality and coverage by partnering with engineering teams to help ensure critical telemetry is available, reliable, and actionable across cloud, corporate, and production environments. Partner with Engineering, Product, and Infrastructure to help embed detection and response into the company's systems by design rather than as an afterthought. Collaborate with internal stakeholders across the organization to implement detection and response projects, improve coverage, and drive progress on high-priority initiatives. Assist with security efforts related to SOC 2 and help translate immediate audit-driven needs into longer-term, sustainable detection and response practices. Evaluate and help implement detection and response tooling, with the flexibility to explore a range of approaches, including modern platforms, open-source options, and AI-enabled tools where appropriate. Take ownership of hands-on technical work, scripting, and automation tasks that help the team move quickly and reduce manual effort.

A security profile with strong exposure to detection and response, rather than a narrow specialization elsewhere. Strong interest in security monitoring, incident response, and modern observability stacks, with the ability to understand technical environments and identify meaningful security improvements. Comfort working in a fast-paced startup