Senior Staff Security Engineer (Architect), Remote

The Senior Staff Security Engineer (Architect) will be responsible for designing, implementing, and maintaining security services that support our business. This role requires a deep understanding of application security, security tools, engineering environment setup, and data architecture. The Security Architect will work cross-functionally to ensure the security of our digital landscape and drive impactful outcomes.

Primary Duties:

• Application Security:
• Design and deploy advanced security controls to safeguard applications.
• Establish secure Software Development Life Cycle (SDLC) and DevSecOps processes.
• Conduct code reviews, threat modeling, and vulnerability assessments using Static/Dynamic Application Security Testing (SAST/DAST) methodologies and tools.
• Implement security controls for web-based SaaS applications, including API Security and Web Application Firewalls (WAF).
• Security Tools:
• Evaluate, deploy, and maintain a suite of security tools, including SIEM, IDS/IPS, DLP, endpoint protection, and threat intelligence platforms.
• Integrate security tools into the organization’s infrastructure, ensuring seamless interoperability.
• Automate security processes and improve operational efficiency using scripting languages such as Python and PowerShell.
• Engineering Environment Setup:
• Work with IT, DevOps, and engineering teams to ensure secure deployment and operation of applications within Cloud Native environments (AWS, Azure, GCP).
• Develop automated security testing and validation systems using tools like Terraform and CloudFormation.
• Shape security services strategy and execution across disciplines.
• Data Architecture:
• Architect and develop secure data systems, ensuring the protection of sensitive data such as Electronic Health Records (EHR) and Clinical data.
• Implement and manage tools for continuous vulnerability scanning and patch management.
• Leverage data to understand trends, metrics, and opportunities to improve security posture.

Minimum Qualifications:

• BS/BTech (or higher) in Computer Science, Information Technology, Cybersecurity, or a related field, or 10 years of security domain experience without a degree.
• 6+ years of experience in securing and deploying applications within Cloud Native environments.
• 3+ years of experience in a dedicated application security role.
• Extensive experience with security tools and methodologies.
• Proficient in coding languages such as Python, R, C++, and JavaScript.
• Strong familiarity with server-side web technologies (e.g., Java, Python, Scala, C#, C++, Go).

Preferred Knowledge, Skills and/or Abilities:

• Knowledge of health-tech systems, including EHR and Clinical data.
• Experience with AI/LLM and machine learning architectures.
• In-depth knowledge of OWASP Top 10 vulnerabilities and best practices for containment and remediation.

Who We Are:Aledade, a public benefit corporation, exists to empower the most transformational part of our health care landscape - independent primary care. We were founded in 2014, and since then, we've become the largest network of independent primary care in the country - helping practices, health centers and clinics deliver better care to their patients and thrive in value-based care. Additionally, by creating value-based contracts across a wide variety of health plans, we aim to flip the script on the traditional fee-for-service model. Our work strengthens continuity of care, aligns incentives and ensures primary care physicians are paid for what they do best - keeping patients healthy. If you want to help create a health care system that is good for patients, good for practices and good for society - and if you're eager to join a collaborative, inclusive and remote-first culture - you've come to the right place.
What Does This Mean for You?At Aledade, you will be part of a creative culture that is driven by a passion for tackling complex issues with respect, open-mindedness and a desire to learn. You will collaborate with team members who bring a wide range of experiences, interests, backgrounds, beliefs and achievements to their work - and who are all united by a shared passion for public health and a commitment to the Aledade mission.
In addition to time off to support work-life balance and enjoyment, we offer the following comprehensive benefits package designed for the overall well-being of our team members:
Flexible work schedules and the ability to work remotely are available for many rolesHealth, dental and vision insurance paid up to 80% for employees, dependents and domestic partnersRobust time-off plan (21 days of PTO in your first year)Two paid volunteer days and 11 paid holidays12 weeks