--- title: 'Cybersecurity Engineer at Iterative Health' canonical: 'https://feeny.ai/job/cybersecurity-engineer-iterative-health-cambridge-massachusetts-wg04qgsd8xmb' type: 'job' last_seen: '2026-09-11' --- # Cybersecurity Engineer at Iterative Health - **Company:** Iterative Health - **Location:** Cambridge Massachusetts, United States - **Posted:** 2026-07-07 - **Last confirmed live:** 2026-09-11 - **Apply:** https://job-boards.greenhouse.io/iterativehealth/jobs/4692777006 ## Job description Iterative Health is a healthcare technology and services company powering the acceleration of clinical research to transform patient outcomes. We built a leading performance-driven network of 100+ sites across the US, Europe, India, and Australia, conducting research directly in the communities where care is delivered across gastrointestinal, hepatology, obesity, and cardiology. By combining deep clinical trial expertise with cutting-edge AI, we connect sponsors' scientific ambitions with high-performing research teams that expedite and expand access to novel therapeutics for patients in need. Today, Iterative Health is headquartered in Cambridge, Massachusetts, and New York City with 250+ employees world-wide. As Iterative Health's first dedicated cybersecurity hire, you won't be stepping into an existing security program—you'll be building it. This is a rare opportunity to establish and lead the company's cybersecurity strategy, creating the foundation that will protect our people, technology, data, and business as we continue to scale. In this role, you'll own the end-to-end security landscape, including our AWS cloud infrastructure, identity and access management, SaaS ecosystem, endpoint security, sensitive clinical and patient data, and the security and compliance frameworks that support our business. You'll work cross-functionally with IT, Engineering, Compliance, Legal, and business leaders to strengthen our security posture, reduce organizational risk, and embed security into every aspect of the company. We're looking for a hands-on security leader who combines deep technical expertise with strong business judgment and a builder's mindset. You'll be equally comfortable architecting security solutions, responding to evolving threats, developing policies and controls, and influencing stakeholders across the organization. This is an opportunity to create a scalable, modern security program that grows alongside a fast-paced healthcare technology company. Where You’ll Drive Impact Security Program Development - Serve as Iterative Health's first dedicated cybersecurity resource — build, mature, and operate the company's security program from the ground up. - Identify security gaps, prioritize remediation, and partner with the IT Director to define security priorities, roadmap items, and risk reduction plans. - Develop, maintain, and enforce security policies, standards, procedures, runbooks, and control documentation. - Provide company-wide subject matter expertise and support related to cybersecurity awareness and compliance. Cloud & Infrastructure Security - Work with engineering team to secure and monitor AWS environments, including IAM, logging, encryption, backups, access controls, and overall cloud security posture. - Configure firewalls, encryption, and access controls across cloud and corporate infrastructure. - Improve security controls across Okta, Entra ID, Microsoft 365, Google Workspace, Box, SharePoint, AWS, and other cloud platforms. Identity & Access Governance - Maintain and improve RBAC, access reviews, privileged access controls, admin role governance, service account oversight, and joiner/mover/leaver security processes. Incident Response - Own incident response for suspected cyberattacks, account compromise, malware, data exposure, unauthorized access, and other security events. - Lead incident investigation, containment, remediation, documentation, root-cause analysis, and post-incident improvement tracking. Compliance & Risk Management - Own security evidence collection, control documentation, remediation tracking, and audit support for SOC 2, HIPAA/HITECH, and applicable GDPR requirements. - Own all vendor assessment and security questionnaire responses. - Support vulnerability management, penetration testing, social engineering testing, customer security reviews, vendor security questionnaires, third-party risk assessments, security awareness, and user education. - Performs related duties as requested ## What You Bring to the Team - Bachelor's degree in IT, engineering, mathematics, or a related field; candidates with extensive cybersecurity certification in lieu of a degree will be considered. - 5+ years of experience in cybersecurity, security engineering, cloud security, IT security, or a related technical security role. - Strong working knowledge of HIPAA, HITECH, SOC 2, and HITRUST frameworks. - Hands-on experience with AWS, Microsoft 365, and Google Workspace security tooling. - Experience with Bitdefender, Microsoft Defender, Intune, Entra ID, Microsoft Purview, Google Workspace security, Okta, or SIEM/logging tools. - Strong documentation skills, including policy and procedure writing. - Ability to communicate effectively with non-technical business partners. - Experience with PowerShell, Python, APIs, or security workflow automation. - Experience with vulnerability management, penetration test remediation, phishing simulation programs, or third-party risk reviews. ## Preferred Qualifications - Knowledge of EU General Data Protection Regulation (GDPR). - One or more relevant certifications, including but not limited to: CompTIA Security+, CySA+, or Pen Test+; GCIH; ISC2 CCSP; AWS Certified Security Specialty (SCS-C03); Microsoft SC-200, SC-300, SC-401, SC-100, or SC-900; Google Cybersecurity Professional or Cloud Cybersecurity Certificate. - Experience building or maturing a security program in a high-growth or startup environment. - Background in healthcare technology, clinical research, or other highly regulated industries. ## How We Work - Collaborative and low-ego team environment - High ownership and accountability culture - Fast-paced and highly iterative growth environment - Open communication and continuous learning mindset - Mission-driven organization focused on improving patient outcomes - Comfortable navigating evolving business priorities and opportunities ## Benefits That Support You We believe great teams do their best work when they feel supported — professionally and personally. - Hybrid work environment with in-office collaboration two days per week in either our NYC or Boston office - Comprehensive medical, dental, and vision coverage, with up to 80% of premiums covered by Iterative Health - Mental health and wellness support through Spring Health - Health HSA or FSA options, and commuter FSA contributions supported by Iterative Health - Unlimited PTO, 12 company holidays, and a company-wide shutdown between Christmas and New Years - 401(k) program with a company match of up to 3% (up to $3,000 annually) - Weekly in-office lunch benefit every Tuesday - 100% company-paid short-term and long-term disability coverage - Annual wellness and professional development stipend to support your health and growth - And more! At Iterative Health, we’re actively working towards creating an environment that is representative of the diversity of patients our technology serves. We are focused on building an equitable and inclusive culture, and by extension, hiring process. If you require any accommodations to make the application process or interviewing experience more accessible to you, please contact CandidateAccommodations@iterative.health. ## About Iterative Health ## Company Overview - **One-liner**: Iterative Health is a healthcare technology and services company that accelerates clinical research by combining AI-powered tools with a performance-driven global site network, focusing on GI, Hepatology, Obesity, and Cardiology therapies. - **Entity Type**: Private (Series C) - **Headquarters**: Cambridge, Massachusetts, United States (also New York, New York) - **Founded**: 2017 - **Founders**: Jonathan Ng, MBBS (Founder & CEO) ## Core Business - **Primary industry/industries**: Healthcare technology, clinical research services, artificial intelligence - **Target customers**: B2B – sponsors (pharma/biotech), CROs, and community-based provider networks (clinical research sites) - **Mission or purpose**: “To accelerate clinical research to bring life-changing therapies to patients sooner, transforming care through expertise and proven results.” ## Products & Services - **AI-Powered Clinical Trial Platform**: Software that streamlines site selection, patient enrollment, and operational workflows, reducing burden and accelerating trial timelines. - **Performance-Driven Site Network**: A global network of elite community-based research sites with deep expertise in GI, Hepatology, Obesity, and Cardiology, enabling faster activation and high enrollment. - **Site Enablement Services**: Operational support, training, and technology to help sites grow their research programs and improve performance. ## Market Standing - **Valuation/Market Cap**: Not publicly disclosed (private company) - **Key Metric**: Total Funding – $264 million (including $77 million Series C closed May 2026) - **Notable Investors/Partners**: Partners include GI Alliance, One GI, and US Heart & Vascular (USHV). Specific investors not named in provided materials, but Series C led by investors noted in Business Wire (May 14, 2026). - **Growth Signals**: - Raised $77M Series C in May 2026 to accelerate clinical research. - Acquired cardiology research sites from NextStage Clinical Research (April 2026), expanding into cardiology. - Presented expanded trial performance data at Digestive Disease Week 2026, demonstrating consistent outperformance of industry benchmarks at double the scale. ## Competitive Advantages - **Deep Therapeutic Focus**: Specialized expertise in GI, Hepatology, Obesity, and Cardiology allows for tailored site selection and patient recruitment that generalist CROs cannot match. - **AI Integration**: Proprietary AI tools that enhance site selection, pre-screening, and operational efficiency, reducing time-to-market for sponsors. - **Embedded Community Network**: Sites are integrated into community care settings, giving access to diverse patient populations and enabling faster, more representative enrollment. - **Performance Track Record**: Proven ability to activate sites faster and achieve industry-leading enrollment metrics, as validated by DDW 2026 data. ## Strategic Focus - **Scale the Site Network**: Continue acquiring and onboarding high-performing community sites, particularly in cardiology and other adjacent therapeutic areas. - **Deepen AI Capabilities**: Invest in machine learning and data science to further automate and optimize clinical trial operations. - **Expand Sponsor Partnerships**: Leverage the combined technology and site network to become the preferred partner for sponsors seeking rapid, reliable trial execution. ## Why Work Here - **Mission-Driven Culture**: Focus on accelerating life-changing therapies to patients; work directly impacts patient access and trial efficiency. - **Values: G.R.I.T.**: The company emphasizes collaboration, curiosity, compassion, resilience, and innovation. Described as a “people-first team of builders.” - **Benefits**: 75% paid company benefits, 401k with 3% company match, health insurance, life/STD/LTD, and paid time off plus company holidays. - **Work Environment**: Hybrid/office presence in Cambridge, MA and New York, NY. Open roles span clinical operations, engineering, data science, finance, marketing, and more. - **Growth Trajectory**: Company is well-funded (Series C, $264M total raised) and actively expanding through acquisitions and headcount, providing career advancement opportunities. ## Sources 1. [iterative.health](https://iterative.health/) – Company homepage, mission, partners, news 2. [iterative.health/about-us](https://iterative.health/about-us/) – Founding story, team, leadership 3. [iterative.health/iterative-health-careers](https://iterative.health/iterative-health-careers/) – Culture, benefits, values 4. [job-boards.greenhouse.io/iterativehealth](https://job-boards.greenhouse.io/iterativehealth) – Current job openings (35 roles) 5. [cbinsights.com](https://www.cbinsights.com/company/iterative-scopes) – Funding history, total raised, stage ## Other roles at Iterative Health - [Senior Clinical Research Coordinator](https://feeny.ai/job/senior-clinical-research-coordinator-iterative-health-flowood-r4egkaajnqg0) — Flowood, MI - [Clinical Research Coordinator I - Memphis, TN](https://feeny.ai/job/clinical-research-coordinator-i-memphis-tn-iterative-health-memphis-czn11v20anvp) — Memphis, TN - [Clinical Research Systems Specialist](https://feeny.ai/job/clinical-research-systems-specialist-iterative-health-new-york-4msj6c4vqq0e) — New York, NY / Cambridge, MA / Southlake, TX - [Research Assistant - Mansfield, TX](https://feeny.ai/job/research-assistant-mansfield-tx-iterative-health-mansfield-8t11je9smktf) — Mansfield, TX - [Clinical Research Coordinator II - Mansfield, TX](https://feeny.ai/job/clinical-research-coordinator-ii-mansfield-tx-iterative-health-mansfield-rv0h9mancmjt) — Mansfield, TX - [Research Site Manager](https://feeny.ai/job/research-site-manager-iterative-health-providence-7efmg6z2808r) — Providence, RI - [Director, Activations Strategy and Operations](https://feeny.ai/job/director-activations-strategy-and-operations-iterative-health-new-york-00wne5qx4ftf) — New York, NY / Cambridge, MA / Southlake, TX - [Clinical Research Coordinator II - Troy, MI](https://feeny.ai/job/clinical-research-coordinator-ii-troy-mi-iterative-health-troy-tve19pph0hqh) — Troy, MI - [Clinical Research Coordinator I - Webster, TX](https://feeny.ai/job/clinical-research-coordinator-i-webster-tx-iterative-health-webster-3cdvktdfajh7) — Webster, TX - [VP, US Site Management & Operations - GI](https://feeny.ai/job/vp-us-site-management-operations-gi-iterative-health-new-york-mzp6n6cw94dr) — New York, NY / Boston, MA / Dallas, TX