Remote Application Security Architect

Summary

Join a highly collaborative, remote-first team that is passionate about creating transformative change in healthcare. Datavant invests in its people and believes in hiring high-potential individuals who can rapidly grow their responsibilities as the company scales.

Requirements

• You are humble
• You can read and may have developed in Python in the past. You have command of the language
• You understand how the broad parts of a security team function and operate in unison
• You can articulate start to finish what role security should play in ideation and build with development teams
• You have opinions and options on most of the steps
• You are a consummate collaborator, it’s inherent in your work behavior
• You are heavily focused on delivery and being impactful; Understand how to operate and succeed in a very fast-paced environment where the security team should be a partner and enabler for the engineering team rather than a blocker
• 3+ years of working in architectural and threat modeling review areas
• 3+ years of working with compliance standards

Responsibilities

• Have a deep understanding of Application and Cloud security
• Use this knowledge to provide architectural reviews and contributions to our development teams
• Have a strong understanding of security controls, both those that exist in audit standards as well as practical controls that can help reduce risk and increase safety in application development environments and AWS and/or Azure
• Work directly with security senior leadership to ensure maturity, depth, and coverage of security controls
• Interface with our Development Engineering leadership as well as Security Engineering leadership daily
• Be fearless in security control descriptions and writing process related elements down
• Review application projects our development teams build
• Put eyes on code as well as working with the teams to understand the broad architecture of things being built
• Provide control feedback in a review environment to development teams
• Own and conduct security/threat model reviews and provide expertise on AppSec and security architecture-related topics
• Own new projects for advancing security in our environment
• Collaborate with others on the teams to ensure project success

Preferred Qualifications

• You are often viewed as the “expert in the room” on building security controls. Development teams know they can depend on you to provide appropriate guidance and build predictable review programs
• You have experience with security in healthcare or other highly regulated space. Examples: HIPAA, HITRUST, SOC 2, PCI, FedRamp experience from an operational response standpoint