Senior Software Engineer (GRC)

Datavant is a data logistics company for healthcare whose products and solutions enable organizations to move and connect data securely. We are a data logistics company for healthcare whose products and solutions enable organizations to move and connect data securely. Datavant has a network of networks consisting of thousands of organizations, more than 70,000 hospitals and clinics, 70% of the 100 largest health systems, and an ecosystem of 500+ real-world data partners.

By joining Datavant today, you’re stepping onto a highly collaborative, remote-first team that is passionate about creating transformative change in healthcare. We hire for three traits: we want people who are smart, nice, and get things done. We invest in our people and believe in hiring for high-potential and humble individuals who can rapidly grow their responsibilities as the company scales. Datavant is a distributed, remote-first team, and we empower Datavanters to shape their working environment in a way that suits their needs.

Datavant Secure Governance team is embarking on a mission and transformation to modernize the way our organization meets GRC objectives. GRC engineering will meet this challenge by building and integrating technologies to automate information gathering and testing to maintain transparent security and compliance both internally, with external partners, and regulators. This will empower the security team with data driven answers to make proactive decisions that protect sensitive information!

You will:

• Have a deep understanding of automating a wide variety of business and technical processes and designing middleware, including big data technologies, normalization strategies, and service bus pipelines. You’ll use this knowledge to streamline and automate various Security functions, including, but not limited to: the vulnerability, risk, audit, and compliance lifecycles. We consider this to be high-impact work for the Security org because you are helping to revolutionize the way we execute traditional Security and Compliance functions. You are replacing daily toil and mistakes with speed and accuracy, freeing our Security and Compliance practitioners to tackle more complex, higher-order challenges.
• Undertake large processes and carry software development from requirements gathering to production ready, secure, and maintainable solutions. This breadth matters because we are a startup and everyone wears multiple hats. This role encompasses everything from some lightweight project management, some quality control, some customer satisfaction, as well as significant development work.
• Have a strong understanding of REST and PostMan for integrating systems via API, as we are going to externalize some of our services.
• Partner with non-developer team leaders, listen to their pain points, and translate challenges into feature requests and solutions, checking in with them frequently to ensure a high customer satisfaction (NPS) for your work, and our team.
• Be self-aware of scalability challenges and resource limitations. You may hear a complete list of problems or unreasonable asks and be able to discern where to draw the line in feature development for reasonable value, setting reasonable expectations with our customers and working off a sensible roadmap that you share with them to achieve buy-in.
• Write production ready code. This means code must be stable, resilient, commented, documented, and most of all, meet stringent security requirements because you are a developer within the larger Security org.
• Be fearless in designing solutions that may require integrating several solutions, processes, requirements together or challenge the way people “have always done things”.
• Be assertive at creating solutions that can be maintained or monitored by other people or teams. To be scalable, we must create easy to use, maintain, and administer products that we can walk away from when complete.
• Be thoughtful about modularity and language agnostic access points. What if someone wants to add a new data source using a different language? How can we design where new features can be added by other teams?
• Be experienced in designing vendor neutral solutions. Security tools change rapidly as our industry adapts to new threats. We must build our solutions with this understanding and design pluggable solutions that minimize tool-change impact.
• Deploy to highly secure and sensitive environments. Container and/or AWS Lambda experience is a plus.

What you will bring to the table:

• You are humble.
• You can read and develop in CSharp, Python, PowerShell, SQL, and Regular Expressions. You have command of these languages.
• You understand how to design middleware solutions to automate processes and have developed cross-platform solutions.
• You can