2 months ago
Responsibilities
- Design, build, operate, and automate security solutions and services.
- Use security data, trends, and metrics to identify and execute posture improvements with stakeholders.
- Lead incident and issue response, including analysis, containment, mitigation, resolution, and remediation.
- Develop and refine security program policies, standards, baselines, and standard operating procedures.
- Mentor and coach junior engineers and analysts.
- Conduct vulnerability identification, evaluation, and triage using SAST and DAST methodologies and tools.
- Perform code reviews and threat modeling and develop automated security testing and validation systems.
- Implement security controls for web-based SaaS applications, including API security and WAF capabilities.
Requirements
- A BS/BTech or higher in Computer Science, Information Technology, Cybersecurity, or a related field, with 10 years of security-domain experience accepted without a degree.
- At least 6 years of experience securing and deploying applications in cloud-native environments.
- At least 3 years of experience in a dedicated application security role focused on secure SDLC and DevSecOps processes.
- At least 4 years of experience acting as a trusted technical decision-maker in a team setting.
- Experience architecting, developing, and deploying large-scale distributed systems.
- Experience with SAST/DAST, vulnerability triage, code reviews, threat modeling, and automated security testing.
- Proficiency in Python, R, C++, or JavaScript and familiarity with server-side technologies such as Java, Python, Scala, C#, C++, or Go.
- Extensive experience in AWS, Azure, or GCP software development environments.
- Knowledge of healthcare systems such as Electronic Health Records, clinical data, and PHI is preferred.
- Knowledge of AI/LLM and machine learning architectures, OWASP Top 10 vulnerabilities, and web application security controls is preferred.
Benefits
- Remote work within the U.S. or work from the Bethesda, MD headquarters; flexible work schedules are available for many roles.
- Health, dental, and vision insurance paid up to 80% for employees, dependents, and domestic partners.
- 21 days of PTO in the first year, two paid volunteer days, and 11 paid holidays.
- 12 weeks of paid parental leave for all new parents.
- Six weeks of paid sabbatical after six years of service.
- Educational Assistant Program and Clinical Employee Reimbursement Program.
- 401(k) with up to 4% match and stock options.
Tech Stack
Categories
About Aledade
Aledade builds software-enabled services that help independent primary care practices succeed in value-based care. It forms and manages accountable care organizations, negotiates value-based contracts with health plans, and provides data analytics, population health tools, and on-the-ground practice support to improve outcomes and shared savings. Founded in 2014 and headquartered in Bethesda, Maryland, Aledade is a privately held public benefit corporation.