3 hours ago
Remote, United StatesSenior
Responsibilities
- Conduct secure code reviews and architecture reviews for projects developed by engineering teams.
- Own security reviews and threat modeling and provide security architecture expertise.
- Lead security-improvement projects as a deep technical expert and core contributor.
- Prioritize security-related requests, including architectural feedback, vulnerability remediation, and compliance-control implementation.
- Create practical security-control descriptions and documented processes that help development teams work effectively.
- Partner with engineering, product leadership, and compliance stakeholders to mitigate risk and embed security throughout the software development lifecycle.
Requirements
- Hands-on experience developing in multiple programming languages and the ability to adapt to new technologies.
- Deep understanding of application security and cloud security.
- Strong knowledge of security controls, audit standards, and practical controls for application environments and AWS and/or Azure.
- Ability to evaluate security tradeoffs when securing legacy systems.
- At least 6 years of experience in architectural and threat-model review areas.
- At least 6 years of experience working with compliance standards.
- Ability to operate in a fast-paced environment and act as a security partner to engineering teams.
- Proficiency in using AI tooling to improve work efficiency and workflows.
- Knowledge of AI platforms, AI/MCP (Model Context Protocol), and Model Gateways.
- Preferred experience in healthcare or another highly regulated industry, including HIPAA, HITRUST, SOC 2, PCI, or FedRAMP operational response experience.
Benefits
- The role offers an estimated total cash compensation range of $184,000–$230,000 USD.
- Post-offer health screenings and proof or completion of required vaccinations may be required depending on client and state requirements.
- Reasonable accommodations are available through Datavant’s accommodation request process.
About Datavant
Datavant builds a healthcare data collaboration platform and network that enables privacy-preserving exchange, linkage, and Release of Information across providers, payers, life sciences, and researchers. It sells software and data services for interoperability, de-identification, and compliant record retrieval, used to route more than 60 million health records among thousands of organizations. Privately held and headquartered in New York City, it reports working with 75% of the 100 largest U.S. health systems and 350+ real-world data partners.