Senior Security (DevSecOps) Engineer I

Summary

Join Aledade as a Senior Security (DevSecOps) Engineer I and play a central role in securing our enterprise, cloud-native environments, applications, and data. Collaborate with engineering and infrastructure teams to ensure secure and scalable cloud environments. Leverage data to understand security trends and make recommendations. Lead incident response efforts, spearheading analysis and mitigation strategies. Contribute to the development and refinement of security documentation. We value individuals who can partner cross-functionally, driving impactful outcomes and securing our digital landscape. This role requires a strong technical background and the ability to communicate complex technical issues to diverse audiences. Aledade offers a comprehensive benefits package, including flexible work schedules, remote work options, and various health and wellness benefits.

Requirements

• BS / BTech (or higher) in Computer Science, Information Technology, Cybersecurity or a related field, 6 years domain experience without degree
• 4+ years combined experience in an enterprise environment (preferably cloud) in the relevant domain(s)
• 3+ years of experience working in operations and/or supporting incident response
• 2+ years of experience acting as a trusted technical decision-maker in a team setting, solving for short-term and long term business value
• 2+ years of experience coaching other engineers

Responsibilities

• Working cross-functionally to design, build, and operate solutions that improve and mature our security capabilities
• Leveraging data to understand trends, metrics, and opportunities to improve our security posture, researching options, and then making recommendations as options to secure those opportunities with stakeholders
• Leading and enhancing incident / issues response efforts, spearheading analysis, containment, and mitigation strategies in a cross-functional environment to ensure effective resolution and remediation of security incidents / issues
• Helping craft and refine security documentation pertinent to our Security Program, such as policies, standards, baselines, and standard operating procedures

Preferred Qualifications

• Prior experience working in the healthcare industry with health-tech systems, like Electronic Health Records, Clinical data, etc
• Experience in scripting languages such as Python and Bash is required
• Experience with Cloud Native Software Development environments and practices with a focus on multi-cloud deployments in AWS, Azure and/or GCP is required
• Prior experience with a focus on tooling, automation, and distributed systems development is preferred
• Experience with continuous integration tools (e.g. Cloud formation, Code deploy, Jenkins, CircleCI, Codefresh, Github Actions etc.)
• Experience with configuration management platforms (e.g. Ansible, Chef, Salt)
• Hands-on experience using Terraform, Python and/or other orchestration platforms at scale
• Familiarity with Agile and waterfall development methodologies
• Familiarity with automated testing methodologies, and continuous integration concepts
• Experience in creating, deploying, maintaining, and troubleshooting Docker images
• Experience in scoping, deploying, maintaining and troubleshooting Kubernetes clusters
• Experience with deploying policies with AWS Control tower, Azure Security hub etc
• Experience generating automated metrics to measure service and program effectiveness and consistency
• Strong communication skills, both written and verbal, with the capability to articulate complex technical issues to a diverse audience

Benefits

• Flexible work schedules and the ability to work remotely are available for many roles
• Health, dental and vision insurance paid up to 80% for employees, dependents and domestic partners
• Robust time-off plan (21 days of PTO in your first year)
• Two paid volunteer days and 11 paid holidays
• 12 weeks paid parental leave for all new parents
• Six weeks paid sabbatical after six years of service
• Educational Assistant Program and Clinical Employee Reimbursement Program
• 401(k) with up to 4% match
• Stock options