Senior Security (AppSec) Engineer II
Description For Senior Security (AppSec) Engineer II
Aledade, a public benefit corporation, is seeking a Senior Security (AppSec) Engineer II to join their remote team. As the largest network of independent primary care in the country, Aledade empowers practices, health centers, and clinics to deliver better care and thrive in value-based care environments.
The ideal candidate will be responsible for designing, implementing, and maintaining security services that support Aledade's business. This role requires a deep understanding of data and automation, as well as the ability to employ these elements at scale. The position demands not only technical expertise but also the capacity to partner cross-functionally across various teams, driving impactful outcomes and enhancing the security of Aledade's digital landscape.
Key responsibilities include:
- Designing, building, and operating solutions to improve and automate security capabilities
- Leveraging data to understand trends and improve security posture
- Leading incident response efforts and spearheading analysis, containment, and mitigation strategies
- Crafting and refining security documentation
- Mentoring junior engineers and analysts
The ideal candidate should have:
- 6+ years of experience in securing and deploying applications within Cloud Native environments
- 3+ years of experience in a dedicated application security role
- Extensive experience with SAST/DAST methodologies and tools
- Proficiency in coding languages such as Python, JavaScript, and SQL
- In-depth knowledge of AI/LLM and machine learning security best practices
- Strong familiarity with server-side web technologies
Aledade offers a comprehensive benefits package, including flexible work schedules, health insurance, robust time off plans, parental leave, and educational assistance programs. The company is committed to fostering a diverse and inclusive work environment.
Join Aledade to be part of a mission-driven team that's reshaping the healthcare landscape, focusing on value-based care and empowering primary care physicians to keep patients healthy.
Responsibilities For Senior Security (AppSec) Engineer II
- Design, build, and operate solutions that continuously improve and automate security capabilities
- Leverage data to understand trends, metrics, and opportunities to improve security posture
- Lead and enhance incident / issues response efforts
- Spearhead analysis, containment, and mitigation strategies in a cross-functional environment
- Help craft and refine security documentation pertinent to the Security Program
- Mentor and coach more junior engineers or analysts
Requirements For Senior Security (AppSec) Engineer II
- BS/BTech (or higher) in Computer Science, Information Technology, Cybersecurity or a related field, or 10 years security domain experience without degree
- 6+ years of experience in securing and deploying applications within Cloud Native environments
- 3+ years of experience in a dedicated application security role with focus on establishing secure SDLC and DevSecOps processes
- Extensive experience identifying, evaluating and triaging vulnerabilities with Static/Dynamic Application Security Testing (SAST/DAST) methodologies and tools
- Proven experience conducting code reviews, and threat modeling
- Extensive experience with developing automated security testing and validation systems using Terraform, Cloudformation, Python, etc.
- Proficient in coding languages such as Python, R, C++, Javascript
- Extensive experience working in AWS/Azure/GCP software development environment
- In-depth knowledge of AI/LLM and machine learning architectures and best practices for securing them
- In-depth knowledge of OWASP Top 10 vulnerabilities along with containment and remediation best practices
- Strong familiarity with server-side web technologies (eg: Java, Python, Scala, C#, C++, Go)
- 4+ years of experience acting as a trusted technical decision-maker in a team setting
Benefits For Senior Security (AppSec) Engineer II
- Flexible work schedules and remote work options
- Health, dental and vision insurance paid up to 80% for employees, dependents, and domestic partners
- 21 days of PTO in the first year
- 2 Paid Volunteer Days & 11 paid holidays
- 12 weeks paid Parental Leave for all new parents
- 6 weeks paid sabbatical after 6 years of service
- Educational Assistant Program & Clinical Employee Reimbursement Program
- 401(K) with up to 4% match
- Stock options
