The Role
Lead design and improvement of detection, alerting, incident response playbooks, and threat hunting. Drive investigations, digital forensics, AI-assisted automation, and cross-functional coordination to contain, eradicate, and prevent security incidents while measuring and improving SOC effectiveness.
Summary Generated by Built In
At Sword, we’re building AI to heal billions and unlock humanity’s full potential. In doing so, we’re pioneering AI Care, a fundamentally new approach to healthcare built for medical reasoning, safety, and real-time treatment, not generic technology applied after the fact. As both a clinical-centric frontier AI lab and an applied AI platform, Sword is reimagining how care is delivered at scale, removing traditional barriers like appointments, waiting rooms, and stigma so more people can access the care they need - and ultimately get back to lives lived in full.
Since 2020, Sword has expanded across Musculoskeletal, Women’s Health, Cardiometabolic, and Mental Health, and is now moving beyond the session to a fully AI-native, 24/7 care program that brings physical activity, therapeutic exercise, psychotherapy, nutrition, and behavior change into one connected experience. More than 1 million members across three continents have completed over 15 million AI sessions, helping 2,000+ enterprise clients avoid more than $1 billion in unnecessary healthcare costs. Backed by 59 clinical studies, 43 patents, and more than $500 million raised from leading investors including Khosla Ventures, General Catalyst, and Founders Fund, Sword is defining a new standard for healthcare.
Since 2020, Sword has expanded across Musculoskeletal, Women’s Health, Cardiometabolic, and Mental Health, and is now moving beyond the session to a fully AI-native, 24/7 care program that brings physical activity, therapeutic exercise, psychotherapy, nutrition, and behavior change into one connected experience. More than 1 million members across three continents have completed over 15 million AI sessions, helping 2,000+ enterprise clients avoid more than $1 billion in unnecessary healthcare costs. Backed by 59 clinical studies, 43 patents, and more than $500 million raised from leading investors including Khosla Ventures, General Catalyst, and Founders Fund, Sword is defining a new standard for healthcare.
Role
As a Senior Security Engineer (Security Operations) at Sword, you will be at the forefront of safeguarding our cloud infrastructure and applications. Your expertise will ensure robust security measures, incident response, and continuous improvement.
Are you looking to join an incredible IT team, passionate about simplifying everyone's work? Look no further, we're hiring! We're a proactive team, constantly staying ahead to ensure everything runs smoothly. As an IT Team we understand the importance of technology in today's workplace and the impact that technical issues can have on productivity and efficiency. Want to join the team? Find out if you've got what it takes!
To get to know more about our Tech Stack, check here.
Explorer (Level 1) — Uses AI daily to boost personal productivity
Builder (Level 2) — Creates workflows and tools that elevate the whole team
Integrator (Level 3) — Embeds AI into products and processes at scale
AI Proficiency at Sword Health
AI fluency is a core expectation at Sword Health. Every candidate is assessed against our three-level framework — be ready to share real examples of how AI is already part of how you work.
Every hire must demonstrate at least Level 1. The expected level will vary depending on the seniority of the role.
What you’ll be doing
- Design and continuously improve detection and alerting controls, ensuring high fidelity and contextual relevance to reduce noise and enable rapid response.
- Build, test, and automate incident response playbooks and runbooks, increasing efficiency and consistency across the incident lifecycle.
- Drive prioritization of alerts using a data-driven, scalable triage framework, aligned with business impact and threat context.
- Lead in-depth investigations, including root cause analysis and digital forensics, and convert findings into actionable insights to strengthen detection and resilience.
- Proactively engage in threat intelligence and threat hunting, identifying new tactics, techniques, and procedures (TTPs), enriching existing controls, and feeding insights into the detection pipeline.
- Own incident handling from detection to resolution, collaborating with engineering, IT, and business teams to contain, eradicate, and recover from threats.
- Define and maintain operational metrics for incident response, using them to drive continuous improvement in speed, accuracy, and organizational readiness.
What you need to have
- Required: Public Trust Clearance - Candidates must be able to obtain and maintain a US public trust clearance.
- Bachelor’s degree in Computer Science, Cybersecurity, or equivalent professional experience.
- Solid experience in cloud environments (AWS, GCP, or Azure), with strong understanding of cloud-native threats.
- Proficiency in scripting languages (e.g., Python, Bash) for automation and tooling development.
- Hands-on experience with SOC tools and platforms, such as SIEM (Splunk, Sentinel, etc.), SOAR, EDR/XDR, and log management.
- Strong understanding of incident containment and eradication strategies, with proven ability to coordinate response with technical teams.
- Familiarity with security frameworks and standards (NIST 800-61, CIS Controls, MITRE ATT&CK, ISO 27001).
- Excellent analytical, critical thinking, and problem-solving skills.
- Ability to consume and synthesize intelligence about actors, techniques or situations to identify emerging risk scenarios.
- Proficiency in process formulation and improvement.
- Background in threat modeling, adversary emulation, and risk-based alert tuning.
- Strong communicator with the ability to explain security risks and actions to both technical and non-technical audiences.
- Proven track record of leading cross-functional efforts in high-pressure situations.
- Ability to foster collaboration across InfoSec, IT, and engineering teams.
- Forensics experience, investigating incidents and preserving digital evidence.
- Leverage AI to automate and optimize security operations workflows, including alert triage, enrichment, and incident classification.
- Design and maintain AI-assisted runbooks, ensuring consistency, auditability, and human-in-the-loop validation for critical decisions.
- Identify opportunities to improve SOC efficiency through AI-driven automation, while maintaining strong controls and avoiding over-reliance on unverified outputs.
- Integrate security tooling with AI platforms and APIs to streamline investigation, response, and reporting processes.
- Enhance vulnerability management and incident response workflows through intelligent prioritization, correlation, and contextualization of findings.
- Continuously evaluate the accuracy, reliability, and security implications of AI-assisted decisions in operational environments.
Public Trust Clearance
Candidates must be able to obtain and maintain a US public trust clearance.
Please note that US citizenship is required to obtain and maintain a government security clearance.
Please note that US citizenship is required to obtain and maintain a government security clearance.
*This range includes base, variable and equity.
These compensation bands are just the starting point. Once someone joins and proves they’re outlier talent, we adjust quickly to ensure their compensation aligns with their impact.
Our job titles may span more than one career level. Actual pay is determined by skills, qualifications, experience, location, market demand, and other factors. Compensation details listed in this posting reflect the base salary and any potential variable, bonus or sales incentives, and the Company’s estimation of the value of private company stock options, if applicable. The pay range is subject to change, future value of company stock options is not guaranteed, and compensation may be modified in the future. In addition to our total compensation, Sword offers a number of benefits as listed below.
US - Sword Benefits & Perks:
• Comprehensive health, dental and vision insurance*
• Life and AD&D Insurance*
• Financial advisory services*
• Supplemental Insurance Benefits (Accident, Hospital and Critical Illness)*
• Health Savings Account*
• Equity shares*
• Discretionary PTO plan*
• Parental leave*
• 401(k)
• Flexible working hours
• Remote-first company
• Paid company holidays
• Free digital therapist for you and your family
*Eligibility: Full-time employees regularly working 25+ hours per week
Note: Applicants must have a legal right to work in the United States, and immigration or work visa sponsorship will not be provided.
SWORD Health, which includes SWORD Health, Inc. and Sword Health Professionals (consisting of Sword Health Care Providers, P.A., SWORD Health Care Providers of NJ, P.C., SWORD Health Care Physical Therapy Providers of CA, P.C.*) complies with applicable Federal and State civil rights laws and does not discriminate on the basis of Age, Ancestry, Color, Citizenship, Gender, Gender expression, Gender identity, Gender information, Marital status, Medical condition, National origin, Physical or mental disability, Pregnancy, Race, Religion, Caste, Sexual orientation, and Veteran status.
Skills Required
- Ability to obtain and maintain US Public Trust clearance (US citizenship required)
- Bachelor's degree in Computer Science, Cybersecurity, or equivalent professional experience
- Solid experience in cloud environments (AWS, GCP, or Azure) and cloud-native threat understanding
- Proficiency in scripting languages for automation (Python, Bash)
- Hands-on experience with SOC tools and platforms: SIEM (e.g., Splunk, Sentinel), SOAR, EDR/XDR, and log management
- Strong understanding of incident containment, eradication strategies, and coordination with engineering/IT
- Forensics experience investigating incidents and preserving digital evidence
- Familiarity with security frameworks and standards (NIST 800-61, CIS Controls, MITRE ATT&CK, ISO 27001)
- Background in threat modeling, adversary emulation, and risk-based alert tuning
- Proven experience driving threat hunting and threat intelligence activities
- Experience defining and maintaining incident response operational metrics and runbooks
- Ability to leverage AI to automate and optimize security operations workflows and maintain human-in-the-loop validation
- Experience integrating security tooling with AI platforms and APIs
- Strong communication skills with ability to explain risks to technical and non-technical audiences and lead cross-functional efforts under pressure
- Proficiency in process formulation and continuous improvement for SOC operations
SWORD Health Compensation & Benefits Highlights
The following summarizes recurring compensation and benefits themes identified from responses generated by popular LLMs to common candidate questions about SWORD Health and has not been reviewed or approved by SWORD Health.
-
Healthcare Strength — Health coverage includes comprehensive medical, dental, and vision, with HSA eligibility and optional accident, hospital, and critical-illness coverage. Life and AD&D insurance are also part of the package.
-
Leave & Time Off Breadth — Time off is structured as discretionary (unlimited) PTO alongside paid company holidays. Remote-first work and flexible hours further support taking time when needed.
-
Wellbeing & Lifestyle Benefits — Free access to the company’s digital therapist is provided for employees and their families. This wellness-oriented perk complements core healthcare coverage.
SWORD Health Insights
Am I A Good Fit?
Get Personalized Job Insights.
Our AI-powered fit analysis compares your resume with a job listing so you know if your skills & experience align.
Success! Refresh the page to see how your skills align with this role.
The Company
What We Do
SWORD Health is the world’s fastest growing virtual musculoskeletal (MSK) care provider, on a mission to free two billion people from chronic and post-surgical pain. The company’s clinical-grade virtual therapy platform pairs expert physical therapists with FDA-listed wearable technology to deliver a personalized treatment plan that is more effective, easier and less expensive than traditional physical therapy. SWORD Health believes in the power of people to recover at home, without resorting to imaging, surgeries or opioids. Since launching in 2015, SWORD Health has worked with insurers, health systems and employers in the U.S, Europe and Australia to make quality physical therapy more accessible to everyone.
