Medior Security Engineer

About kaiko.ai

Kaiko is building a next-generation agentic clinical AI assistant that helps clinicians reason across patient data, guidelines, and diagnostics.

Healthcare decisions are rarely made by a single person or from a single data source. Kaiko's assistant maintains longitudinal patient context across encounters, clinicians, and institutions, enabling collaboration, second opinions, and complex diagnostic workflows. The system is designed to operate safely in real clinical environments, with human oversight, auditability, and regulatory alignment at its core.

Our assistant core supports broadly applicable clinical tasks such as patient data navigation, guideline interaction, multimodal interaction (chat and voice), and care coordination. On top of this foundation, we are developing specialized diagnostic agents in areas such as oncology, radiology, and pathology.

We build in close collaboration with leading hospitals and research centers, including the Netherlands Cancer Institute (NKI). kaiko is a well-funded company with a growing international team, operating from Zurich and Amsterdam.

About the role

Kaiko processes sensitive health data while rapidly shipping platform and product features—security must enable both.

As a Medior Security Engineer on our security team supporting platform and product, you’ll design and operate pragmatic controls across identity, application, cloud, data, and network security—keeping teams fast while protecting patient data.

You’ll have high ownership and chances to build new capabilities from the ground up (from first principles to production), working with modern infrastructure and solving meaningful problems in a regulated context.

You will be based in either The Netherlands or Switzerland, with the expectation of spending at least 50% of your time at the office.

Some areas of responsibility

• Contribute in core domains: IAM & RBAC/ABAC, data governance, application, cloud, and network security.

• Harden Kubernetes and cloud; codify security controls and automate guardrails in CI/CD.

• Proactively discover risks (threat hunting, automated checks) and run incident response with clear SLAs.

• Grow a culture of security via enablement: guidance, trainings, and security-champions support.

About you

• 4–6 years of hands-on security engineering in production (platform/AppSec/cloud).

• Strong with Kubernetes and at least one cloud (GCP/AWS/Azure); solid IAM/RBAC and data governance.

• Proficient in Python/Go/Rust for tooling; experienced with IaC (OpenTofu or Terraform) and Git workflows.

• Knowledge of cloud networking and securing workloads end-to-end.

Soft skills:

• Solution-oriented and pragmatic; balance usability with required protection for healthcare records.

• Collaborative communicator who coaches teams and writes clear, actionable guidance.

• Bias to automate and continuously improve.

Nice to have:

• Experience in healthcare or other regulated environments (GDPR, ISO 27001/NEN 7510, SOC 2).

• Container supply-chain security (SBOM, image signing, admission controls).

• Incident response experience and runbook authorship.

We are excited to gather a broad range of perspectives in our team, as we believe it will help us build better products to support a broader set of people. If you’re excited about us but don’t fit every single qualification, we still encourage you to apply: we’ve had incredible team members join us who didn’t check every box!

Why kaiko

At kaiko, we believe the best ideas come from collaboration, ownership and ambition. We’ve built a team of international experts where your work has direct impact. Here’s what we value:

• Ownership: You’ll have the autonomy to set your own goals, make critical decisions, and see the direct impact of your work.

• Collaboration: You’ll approach disagreement with curiosity, build on common ground and create solutions together.

• Ambition: You’ll be surrounded by people who set high standards, see obstacles as opportunities, and work relentlessly to create better outcomes for patients.
  

In addition, we offer:

• An attractive and competitive salary, a good pension plan and 25 vacation days per year.

• Great offsites and team events to strengthen the team and celebrate successes together.

• A EUR 1000 learning and development budget to help you grow.

• Autonomy to do your work the way that works best for you, whether you have a kid or prefer early mornings.

• An annual commuting subsidy.

Our interview process

Our interview process is designed to assess mutual fit across skills, motivation, and values. It typically includes the following steps:

1. Screening call: A short conversation to align on your motivation, career goals, and initial fit for the role.

1. Technical interview: A deep dive into your problem-solving approach through a technical challenge, case study, or role-specific scenario.

1. Onsite meeting (optional): Meet team members across functions to explore collaboration dynamics, team fit, and day-to-day context.

1. Final executive conversation: A discussion with a member of the executive team focused on long-term alignment, cultural fit, and shared expectations for impact.