Security Engineer - Data

About The Company Aledade PBC is a public benefit corporation dedicated to transforming the healthcare landscape by empowering independent primary care practices. Established in 2014, the company has grown to become the largest network of independent primary care providers in the United States. Aledade's mission is to help practices, health centers, and clinics deliver higher quality care to their patients while thriving in a value-based care environment. The organization actively works to create a healthcare system that benefits patients, providers, and society by fostering innovative models that prioritize preventive care, care coordination, and sustainable health outcomes. Through establishing value-based contracts across diverse health plans, Aledade aims to shift away from traditional fee-for-service models, promoting incentives that reward quality and patient well-being. The company’s culture emphasizes collaboration, inclusivity, and a shared passion for public health, making it an ideal environment for professionals committed to making a meaningful impact in healthcare. About The Role The Staff Security Engineer at Aledade PBC will play a critical role in designing, implementing, and maintaining robust security services that underpin the organization’s digital infrastructure. This position requires a strategic thinker with a deep understanding of data security, cloud platforms, and automation to ensure the confidentiality, integrity, and availability of sensitive healthcare data. The engineer will lead initiatives to develop comprehensive security strategies, deploy advanced security controls, and shape security service strategies in collaboration with cross-functional teams. Beyond technical expertise, the ideal candidate will excel at partnering across disciplines to drive impactful security outcomes and foster a security-first mindset within the organization. Mentoring and guiding new engineers will be a key aspect of this role, ensuring the security team continues to grow and adapt to emerging threats and technologies. This role is vital in safeguarding healthcare data, supporting compliance with regulatory requirements such as HIPAA, and embedding security into data pipelines and cloud environments. Qualifications BS/BTech (or higher) in Computer Science, Information Technology, Cybersecurity, or a related field8+ years of experience in software or security engineering within Cloud Native environmentsExtensive experience with data security and data security posture management (DSPM)Proficiency in Python or similar scripting languages and regex for automationDeep understanding of cloud data platforms such as Postgres, Snowflake, Databricks, AWS S3Experience with data architectures including data warehouses, data lakes, and lakehousesFoundational knowledge of protecting PII/PHI and healthcare regulatory requirements like HIPAAHands-on experience with DSPM tools such as Wiz DSPM, BigID, Cyera, or Bedrock DataExperience embedding security controls into data pipelines and ETL/ELT workflowsKnowledge of data lifecycle management, data retention, and legal hold processesFamiliarity with cryptography tools such as tokenization and encryption for data protectionExperience architecting, developing, and deploying large-scale distributed systemsExperience with cloud technologies such as AWS, Azure, GCPBuilding CI/CD pipelines and familiarity with server-side web technologies (Java, Python, Scala, C#, C++, Go)Minimum of 4 years acting as a trusted technical decision-maker in a team settingExperience with health-tech systems, including electronic health records and clinical data, is preferredPrior experience working in regulated, compliance-heavy environments such as healthcare Responsibilities Lead the development, implementation, and ongoing maintenance of comprehensive security strategies and solutions aligned with organizational goals.Design and deploy advanced security controls to safeguard data, applications, and infrastructure against evolving threats.Collaborate across teams to shape and execute security service strategies that integrate seamlessly with business operations.Establish and uphold security processes and standards to support high-quality engineering practices.Mentor and develop engineering team members, fostering a security-conscious culture and promoting best practices.Implement data security measures, including data discovery, classification, and DSPM tools, to protect sensitive healthcare data.Embed security controls into data pipelines, ETL/ELT workflows, and cloud environments to ensure continuous protection.Manage data lifecycle, retention policies, and legal holds to comply with regulatory requirements.Utilize cryptography, tokenization, and encryption techniques to secure data at rest and in transit.Stay abreast of emerging security threats, industry standards, and best practices to proactively enhance security posture.Participate in audits, compliance reviews, and risk assessments to ensure regulatory adherence and mitigate vulnerabilities. Benefits Flexible work schedules and remote work options for many rolesHealth, dental, and vision insurance coverage paid up to 80% for employees, dependents, and domestic partnersGenerous paid time off including 21 days of PTO in the first year, two volunteer days, and 11 paid holidaysPaid parental leave of 12 weeks for all new parentsSix weeks paid sabbatical after six years of serviceEducational assistance programs and clinical employee reimbursement401(k) plan with up to 4% employer matchStock options and other employee incentivesOpportunities for professional development and growth within a mission-driven organization Equal Opportunity We are proud to be an Equal Employment Opportunity employer. We are committed to equal employment opportunity regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity, veteran status, or any other basis protected by federal, state, or local law.