Refolk
Open nowEngineering420-Engineering

Security Engineer, Detection & Response

Assort Health · San Francisco, California

Location
San Francisco, California, United States
Workplace
Hybrid
Employment
Full time
Level
Mid level
Posted
27 August

About this role

Building Healthcare That Remembers

Every time you call a doctor's office, the system forgets you the moment you hang up. You wait on hold, explain everything from scratch, get bounced between lines, and hope someone follows up. Everyone has felt this. No one should have to.

At Assort Health, we're building one continuous conversation for every patient. An AI agent that knows who you are, remembers how you like to be reached, and carries that context from your first symptom to your full recovery. What began as the first voice AI agent to schedule a specialty appointment has become the largest proprietary specialty dataset in healthcare: 270 million patient interactions, 62,000 care protocols, 1.6 million decision pathways.

We went from 15 people in 2025 and will cross 250 by the end of 2026. Revenue is up 20x in 15 months and we've raised $222 million, including a recent $120 million Series C at a $1.2 billion valuation. We've also been named to the Forbes Cloud 100 and the 2026 Enterprise Tech 30 as the only healthcare AI company on the list!

Healthcare spends $1.1 trillion a year on administration instead of care. If you want to help change that, apply below.

About the role

We are looking for a Security Engineer to help build and strengthen security foundations from the ground up in a fast-moving startup environment, with a primary focus on detection and response. This is a strong opportunity for someone early in their career who brings a strong interest in security monitoring, incident response, and detection engineering and is excited to work across these areas as the company scales. The role is designed for someone who wants meaningful ownership, broad exposure within detection and response, and the chance to help shape how security operates as the company matures. You will partner closely with teams across the organization, help close foundational gaps, and contribute to building a more robust, continuous detection and response program over time. This role is based in San Francisco and follows a 4-day in-office working model. Flexible to hire remotely for the right candidate in the US.

What you'll be doing

  • Help build and operate the company's detection and response capabilities, including continuous monitoring, triage, investigation, containment, and remediation of security events across a diverse set of networks and infrastructure.

  • Support operational rigor and incident readiness by helping build and maintain incident playbooks, on-call and escalation paths, tabletop exercises, and continuous improvement of response quality and speed.

  • Improve detection quality and coverage by partnering with engineering teams to help ensure critical telemetry is available, reliable, and actionable across cloud, corporate, and production environments.

  • Partner with Engineering, Product, and Infrastructure to help embed detection and response into the company's systems by design rather than as an afterthought.

  • Collaborate with internal stakeholders across the organization to implement detection and response projects, improve coverage, and drive progress on high-priority initiatives.

  • Assist with security efforts related to SOC 2 and help translate immediate audit-driven needs into longer-term, sustainable detection and response practices.

  • Evaluate and help implement detection and response tooling, with the flexibility to explore a range of approaches, including modern platforms, open-source options, and AI-enabled tools where appropriate.

  • Take ownership of hands-on technical work, scripting, and automation tasks that help the team move quickly and reduce manual effort.

What we're looking for

  • A security profile with strong exposure to detection and response, rather than a narrow specialization elsewhere.

  • Strong interest in security monitoring, incident response, and modern observability stacks, with the ability to understand technical environments and identify meaningful security improvements.

  • Comfort working in a fast-paced startup environment where priorities can shift and the workload can be intense.

  • A high degree of ownership, autonomy, and initiative, with the ability to make progress in environments that are still being built.

  • Willingness to learn quickly, stay open-minded, and adapt to new projects or unfamiliar problem spaces as business needs evolve.

  • Ability to work cross-functionally and build productive relationships with teams across the company.

  • Good judgment when balancing immediate detection and response needs with longer-term program development.

  • Strong written and verbal communication skills, with the ability to stay calm under pressure and help support security incidents involving stakeholders across a diverse range of teams and expertise.

  • A practical, hands-on approach to security work, with interest in solving real operational problems rather than working only at a policy level.

What you'll Need

  • Seeking 2 to 4 years of relevant experience.

  • Experience in detection engineering, incident response, and/or security operations.

  • Background in modern observability stacks (e.g., SIEM, EDR, cloud telemetry, logging) and detection primitives is important.

  • Growing understanding of modern adversary tradecraft (TTPs), with interest in translating it into practical detection strategies and response actions.

  • Ability to perform technical security work such as reviewing telemetry, assessing infrastructure for detection gaps, and supporting security automation through scripting.

  • Familiarity with environments that rely on modern cloud and SaaS tooling.

  • Experience in a startup or similarly fast-growth environment is highly valuable.

Benefits & Perks for Assorties

  • 💸 Competitive Compensation - Including salary and employee stock options so you share in our success.

  • 📚 Lifelong Learning - Annual budget for professional development, plus training opportunities to help you grow.

  • 💻 Office Setup Stipend - We’ll outfit your in-office workspace so comfy as it's productive.

  • 🩺 Top-Tier Health Coverage - Medical, dental, and vision insurance, because your health comes first.

  • 🏖 Flexible PTO - We trust you to take the time you need to recharge and come back ready to crush it.

  • 🥗 Meals & Snacks - Lunch, dinner, and snack breaks that fuel great ideas.

  • 💪 Fitness Stipend - Your wellness matters. We reimburse monthly membership costs to support your health.

  • 🚆 Commuter Benefits - We cover eligible transportation costs to make your trip to work easier.

  • 👵 401(k) - Build your retirement savings.

How We Work & What We Value

Our team at Assort Health moves fast, stays focused, and is fueled by a desire to serve our customers and patients. Our company values guide how we work - they are present in how we show up, make decisions and work together to move our mission forward. We bring a Day One Drive, relentlessly striving to improve, keep a 5-Star Focus, as our customers are our lifeblood, always Answer the Call, remembering that ownership and accountability are paramount, and show up with One Pulse, because we are one team, with one rhythm and one result. Our team is growing and we are looking for motivated, hardworking, and passionate talent. If you want to make healthcare accessible for everyone, we’d love to hear from you!

Please note: the Assort Health Talent Team will only email you from an assorthealth.com email address.

As published by Assort Health. Applications are handled on their site.

Skills this posting mentions

CValuationObservability

About Assort Health

Assort Health is building healthcare that remembers. From call center automation and form intake to referrals, document processing, outreach, and payments, we manage the entire patient journey for providers. Our platform is the most widely used AI agents platform for the patient journey, built on more than 250 million specialty patient interactions and a model that handles the complexity general-purpose AI can’t. Healthcare organizations see a 5% lift in appointment volume, a 115% increase in labor capacity, and a 4.3 out of 5 patient satisfaction score. With over $222M raised from Menlo Ventures, Lightspeed, First Round Capital, Felicis Ventures, Chemistry Ventures, Apolo Ohno, and Joe Montana, Assort is becoming the standard for how providers use AI to transform the patient journey. In 2026, Assort Health was featured in a KLAS Research Emerging Company Spotlight, earning a 94.5 overall performance score, named to the CB Insights AI 100, and ranked No. 20 among Mid Stage companies on the Enterprise Tech 30, as the only healthcare AI company in that cohort. Additional recognition includes Forbes’ 2025 Cloud 100 Rising Stars and Next Billion-Dollar Startups lists, Greenfield Partners’ 2025 AI Disruptors 60, and Redpoint’s 2025 AI64.

All 33 openings at Assort Health

One click, then it is written

Apply to Assort Health with a resume written for this role.

Queue Security Engineer, Detection & Response and I read the posting, rewrite your resume against it, draft the cover letter, and score the fit. Then you press send, or press one button and I fill in Assort Health’s form for you.

  1. 01Drop your resume

    A PDF or a LinkedIn URL. About a minute, once.

  2. 02I rank the openings

    Every weekday morning, the live catalog scored against your history. Up to 20 worth your time, not two hundred links.

  3. 03Each one is written up

    Resume rewritten for the posting, a cover letter, a fit score. Press send, or let me fill in the form.

  • 25 sent a week, free
  • No card
  • Nothing sent until you say so

More roles at Assort Health

See all

Similar roles elsewhere

See more

Put this to work

Paste your career in once. Every application after that is written for you.

Drop a resume or a LinkedIn URL. I rank the live openings against it, rewrite the resume and write a cover letter for the best of them, and fill in the employer's form when you press the button. You read, you decide what goes out.

  1. 01Drop your resume

    A PDF or a LinkedIn URL. About a minute, once.

  2. 02I rank the openings

    Every weekday morning, the live catalog scored against your history. Up to 20 worth your time, not two hundred links.

  3. 03Each one is written up

    Resume rewritten for the posting, a cover letter, a fit score. Press send, or let me fill in the form.

  • New matches ranked and written before you are up.
  • Every bullet stays inside what your history supports. Nothing invented.
  • Queued, submitted, interviewing, offer: one screen, not a spreadsheet.

Free, no card. Up to 25 applications sent a week, and nothing is sent until you say so.

Listed from the job board Assort Health publishes. Refolk is not the employer and does not handle their hiring. Applications go to Assort Health directly.

Hiring at Assort Health? Post this role to the Refolk talent pool for $299, once. No commission, refunded if I find nobody. Post a role for $299