Senior Security Engineer

About AgelessRx

AgelessRx is a first-of-its-kind, longevity-focused telehealth platform with an e-commerce component. Our mission is to collectively give people millions of extra healthy years, so everyone can enjoy more of what they love in a world where people are empowered to live as long as they want. We believe aging should no longer be treated as a dreadful inevitability, but instead, as a puzzle that can be solved, a fight that can be fought – just as a disease with a cure. Through our free-to-use platform, we offer trusted, data-driven longevity solutions and scientifically backed prescription therapies to help safely lower the risk of age-related diseases.

About the role

AgelessRx is seeking a hands-on, highly capable Senior Security Engineer to serve as the technical owner of information security across our growing telehealth environment. As a healthcare company, protected health information (PHI) flows through much of what we build and operate, making security, privacy, and regulatory compliance fundamental to our products, infrastructure, and internal systems.

This is a broad security engineering role with meaningful ownership across application and product security, cloud infrastructure, identity and access management, vulnerability management, security operations, and technical security governance. This person will help define AgelessRx 's security roadmap, build and operate the recurring programs that keep the company secure and audit-ready, and partner directly with Engineering to identify and mitigate risk throughout the development lifecycle.

The Senior Security Engineer will also serve as a key technical partner in AgelessRx 's approach to AI security and governance. As AI becomes increasingly embedded across our products and internal operations, this person will help ensure AI tools and systems are deployed responsibly, securely, and in accordance with AgelessRx 's obligations as a healthcare organization.

This is not a compliance-only role. We are looking for someone who can move comfortably between strategy and execution: reviewing a sensitive code path or investigating a vulnerability one day, establishing an access-control standard or evaluating an AI vendor the next, and translating technical and regulatory risk into clear recommendations for leadership.

What you'll do

Security Program & Risk Management

- Own and continuously evolve AgelessRx 's technical security roadmap, prioritizing initiatives based on risk, business impact, regulatory requirements, and company growth.

- Establish and operate repeatable security programs, controls, reporting, and documentation across the organization.

- Conduct and document security and architecture reviews for new systems, vendors, integrations, and significant technology changes.

- Maintain visibility into security risks, vulnerabilities, remediation priorities, owners, and timelines.

- Conduct and support security risk assessments, including those required under the HIPAA Security Rule.

- Maintain audit-ready evidence and documentation supporting AgelessRx 's technical security controls.

- Plan and facilitate recurring security and incident-response exercises, including scenarios involving PHI exposure or other material security events.

- Provide leadership with a clear, actionable view of the company's security posture, priorities, open risks, and remediation progress.

Identity, Cloud & Infrastructure Security

- Define security requirements and technical standards for identity, authentication, authorization, and privileged access across AgelessRx .

- Partner with the IT Administrator to implement and maintain SSO, MFA, privileged access management, endpoint controls, and other workforce security requirements.

- Assess and strengthen cloud infrastructure, IAM configurations, external attack surfaces, and administrative access.

- Own the vulnerability-management program across cloud infrastructure, endpoints, applications, and oth