Staff Security Engineer - Data Security
Summary
Staff-level security engineer owning data security at a health-tech company: designing, building, and maintaining security services and controls that protect sensitive data across cloud data platforms (Postgres, Snowflake, Databricks, AWS S3), with heavy use of DSPM, data classification, encryption, and Python automation in a HIPAA-regulated environment.
Primary Duties
- Lead the development, implementation, and ongoing maintenance of comprehensive security strategies and solutions.
- Design and deploy advanced security controls to protect the business.
- Work across disciplines to shape our security services strategy and execution
- Set and uphold the standard for security processes to support high-quality engineering
- Mentor and galvanize new engineers to do their best work
Minimum Qualifications
- BS/BTech (or higher) in Computer Science, Information Technology, Cybersecurity or a related field
- 8+ years of experience in software or security engineering within Cloud Native environments
-
Data Security
- Cloud & Data Platforms: Experience with modern cloud data platforms (e.g., Postgres, Snowflake, Databricks, AWS S3) and data architectures (data warehouses, data lakes, lakehouses).
- Data Security Posture Management (DSPM): Deep experience with data discovery, classification, and other DSPM focused areas to help protect sensitive data across the organization.
- Technical & Scripting: Proficiency in Python (or a similar language) and regex patterns for automation and tooling integration.
- Compliance & Privacy: Foundational understanding of protecting PII/PHI and healthcare regulatory requirements (e.g., HIPAA).
Preferred KSA’s
-
Experience architecting, developing, and deploying large-scale distributed systems at scale
-
Experience with cloud technologies, e.g., AWS, Azure, GCP
-
Experience building continuous integration and continuous development (CI/CD) pipelines
-
Familiarity with server-side web technologies (eg: Java, Python, Scala, C#, C++, Go)
-
4+ years of experience acting as a trusted technical decision-maker in a team setting, solving for short-term and long-term business value
-
Experience with health-tech systems, like Electronic Health Records, Clinical data, etc.
Data Security
-
-
DSPM Tools: Hands-on experience with Data Security Posture Management platforms (e.g., Wiz DSPM, BigID, Cyera, Bedrock Data).
-
Pipeline Integration: Experience embedding security controls directly into data pipelines and ETL/ELT workflows.
-
Data Lifecycle: Familiarity with data retention, lifecycle management, and legal hold processes.
-
Data Protection: Familiarity and experience with Tokenization, Encryption, or cryptography tools or processes that help protect sensitive data at rest.
-
Industry Context: Prior experience working in healthcare, health tech, or another highly regulated, compliance-heavy environment.
-
Physical Requirements
Skills
As published by lever · 10 questions · 1 written answer
Basics
Resume/CV, Full name, Email, Phone, Current location, Current company, LinkedIn URL, Twitter URL, GitHub URL, Portfolio URL, Other website
Short answers (1)
- What is your desired salary for this position?
Pick from a list (8)
- Are you legally eligible to work in the United States?
- Do you currently require the company’s sponsorship or need the company’s assistance to obtain or maintain authorization to work legally in the United States? This includes, but is not limited to, H-1B visas (lottery and transfers), TN visas, E-3 visas, or other company-sponsored visas.
- In the future, will you require the company’s sponsorship or need the company’s assistance to obtain or maintain authorization to work legally in the United States? This includes, but is not limited to, H-1B visas (lottery and transfers), TN visas, E-3 visas, or other company-sponsored visas.
- Please list the state that you plan to be physically located in while employed with our company? For employment at Aledade, it is required to be located within the United States; even for remote based roles. optional
- Are you subject to an agreement with a former employer or other party (such as non-competition agreement) that might, in any way, restrict your ability to work for our Company?*
- Would you like to opt-in to receiving text messages for this role regarding the hiring process (e.g., interview requests and reminders)? Note: Selecting “No” will not eliminate you from consideration. Message and data rates may apply. You can opt-out at any time by replying “STOP.”
- By clicking "Submit Application" I agree to the Aledade Applicant Privacy Policy & Terms of Service - https://www.aledade.com/privacy-policy-applicants optional
- By clicking "Submit Application" I certify that all statements made in this application are true and complete. I understand that any falsification, misrepresentation, or omission of fact is sufficient cause for my removal from consideration for employment or my dismissal if hired optional
Written answers (1)
- How did you learn about Aledade?