Security Engineer - Data

About The Company
Aledade PBC is a public benefit corporation dedicated to transforming the healthcare landscape by empowering independent primary care practices. Established in 2014, the company has grown to become the largest network of independent primary care providers in the United States. Aledade's mission is to help practices, health centers, and clinics deliver higher quality care to their patients while thriving in a value-based care environment. The organization actively works to create a healthcare system that benefits patients, providers, and society by fostering innovative models that prioritize preventive care, care coordination, and sustainable health outcomes. Through establishing value-based contracts across diverse health plans, Aledade aims to shift away from traditional fee-for-service models, promoting incentives that reward quality and patient well-being. The company’s culture emphasizes collaboration, inclusivity, and a shared passion for public health, making it an ideal environment for professionals committed to making a meaningful impact in healthcare.
About The Role
The Staff Security Engineer at Aledade PBC will play a critical role in designing, implementing, and maintaining robust security services that underpin the organization’s digital infrastructure. This position requires a strategic thinker with a deep understanding of data security, cloud platforms, and automation to ensure the confidentiality, integrity, and availability of sensitive healthcare data. The engineer will lead initiatives to develop comprehensive security strategies, deploy advanced security controls, and shape security service strategies in collaboration with cross-functional teams. Beyond technical expertise, the ideal candidate will excel at partnering across disciplines to drive impactful security outcomes and foster a security-first mindset within the organization. Mentoring and guiding new engineers will be a key aspect of this role, ensuring the security team continues to grow and adapt to emerging threats and technologies. This role is vital in safeguarding healthcare data, supporting compliance with regulatory requirements such as HIPAA, and embedding security into data pipelines and cloud environments.
Qualifications
BS/BTech (or higher) in Computer Science, Information Technology, Cybersecurity, or a related field
8+ years of experience in software or security engineering within Cloud Native environments
Extensive experience with data security and data security posture management (DSPM)
Proficiency in Python or similar scripting languages and regex for automation
Deep understanding of cloud data platforms such as Postgres, Snowflake, Databricks, AWS S3
Experience with data architectures including data warehouses, data lakes, and lakehouses
Foundational knowledge of protecting PII/PHI and healthcare regulatory requirements like HIPAA
Hands-on experience with DSPM tools such as Wiz DSPM, BigID, Cyera, or Bedrock Data
Experience embedding security controls into data pipelines and ETL/ELT workflows
Knowledge of data lifecycle management, data retention, and legal hold processes
Familiarity with cryptography tools such as tokenization and encryption for data protection
Experience architecting, developing, and deploying large-scale distributed systems
Experience with cloud technologies such as AWS, Azure, GCP
Building CI/CD pipelines and familiarity with server-side web technologies (Java, Python, Scala, C#, C++, Go)
Minimum of 4 years acting as a trusted technical decision-maker in a team setting
Experience with health-tech systems, including electronic health records and clinical data, is preferred
Prior experience working in regulated, compliance-heavy environments such as healthcare
Responsibilities
Lead the development, implementation, and ongoing maintenance of comprehensive security strategies and solutions aligned with organizational goals.
Design and deploy advanced security controls to safeguard data, applications, and infrastructure against evolving threats.
Collaborate across teams to shape and execute security service strategies that integrate seamlessly with business operations.
Establish and uphold security processes and standards to support high-quality engineering practices.
Mentor and develop engineering team members, fostering a security-conscious culture and promoting best practices.
Implement data security measures, including data discovery, classification, and DSPM tools, to protect sensitive healthcare data.
Embed security controls into data pipelines, ETL/ELT workflows, and cloud environments to ensure continuous protection.
Manage data lifecycle, retention policies, and legal holds to comply with regulatory requirements.
Utilize cryptography, tokenization, and encryption techniques to secure data at rest and in transit.
Stay abreast of emerging security threats, industry standards, and best practices to proactively enhance security posture.
Participate in audits, compliance reviews, and risk assessments to ensure regulatory adherence and mitigate vulnerabilities.
Benefits
Flexible work schedules and remote work options for many roles
Health, dental, and vision insurance coverage paid up to 80% for employees, dependents, and domestic partners
Generous paid time off including 21 days of PTO in the first year, two volunteer days, and 11 paid holidays
Paid parental leave of 12 weeks for all new parents
Six weeks paid sabbatical after six years of service
Educational assistance programs and clinical employee reimbursement
401(k) plan with up to 4% employer match
Stock options and other employee incentives
Opportunities for professional development and growth within a mission-driven organization
Equal Opportunity
We are proud to be an Equal Employment Opportunity employer. We are committed to equal employment opportunity regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity, veteran status, or any other basis protected by federal, state, or local law.

Work arrangement
Yes