5 hours ago
Responsibilities
- Design, build, operate, and automate security solutions and services.
- Use security data, trends, and metrics to identify and execute posture improvements with stakeholders.
- Lead incident and issue response, including analysis, containment, mitigation, resolution, and remediation.
- Develop and refine security program policies, standards, baselines, and standard operating procedures.
- Mentor and coach junior engineers and analysts.
- Conduct vulnerability identification, evaluation, and triage using SAST and DAST methodologies and tools.
- Perform code reviews and threat modeling and develop automated security testing and validation systems.
- Implement security controls for web-based SaaS applications, including API security and WAF capabilities.
Requirements
- A BS/BTech or higher in Computer Science, Information Technology, Cybersecurity, or a related field, with 10 years of security-domain experience accepted without a degree.
- At least 6 years of experience securing and deploying applications in cloud-native environments.
- At least 3 years of experience in a dedicated application security role focused on secure SDLC and DevSecOps processes.
- At least 4 years of experience acting as a trusted technical decision-maker in a team setting.
- Experience architecting, developing, and deploying large-scale distributed systems.
- Experience with SAST/DAST, vulnerability triage, code reviews, threat modeling, and automated security testing.
- Proficiency in Python, R, C++, or JavaScript and familiarity with server-side technologies such as Java, Python, Scala, C#, C++, or Go.
- Extensive experience in AWS, Azure, or GCP software development environments.
- Knowledge of healthcare systems such as Electronic Health Records, clinical data, and PHI is preferred.
- Knowledge of AI/LLM and machine learning architectures, OWASP Top 10 vulnerabilities, and web application security controls is preferred.
Benefits
- Remote work within the U.S. or work from the Bethesda, MD headquarters; flexible work schedules are available for many roles.
- Health, dental, and vision insurance paid up to 80% for employees, dependents, and domestic partners.
- 21 days of PTO in the first year, two paid volunteer days, and 11 paid holidays.
- 12 weeks of paid parental leave for all new parents.
- Six weeks of paid sabbatical after six years of service.
- Educational Assistant Program and Clinical Employee Reimbursement Program.
- 401(k) with up to 4% match and stock options.
Tech Stack
Categories
About Aledade
Aledade is a physician-led public benefit corporation and national leader in value‑based care. We help primary care organizations deliver better patient outcomes and thrive financially by keeping people healthy. Through our accountable care organizations, over 3,000 primary care partners in 46 states and the District of Columbia share in the rewards of improved care for over 3 million patients — supported by advanced insights, AI‑driven technology, personal coaching, policy expertise and 200+ value-based contracts. To learn more, visit www.aledade.com or follow us on LinkedIn, X, Facebook, Instagram and YouTube.