高级安全工程师 II - 数字安全产品管理
Senior Security Engineer II - DSPM
作为Aledade的高级安全工程师II,我们发挥核心作用,帮助保护我们的企业、云原生环境和应用程序。我们寻找理解数据和自动化是我们使命的重要组成部分,并知道如何在大规模上主动应用这些要素的安全工程师。除了技术专长,我们重视能够跨团队合作、推动有影响力成果并进一步保护我们数字环境的个人。
主要职责
跨职能协作,设计、构建和运营持续提升和自动化我们安全能力的解决方案
利用数据了解趋势、指标和改进安全态势的机会,并与利益相关者一起执行这些机会
领导和加强事件响应工作,在跨职能环境中牵头分析、遏制和缓解策略,以确保安全事件的有效解决和修复
协助制定和优化与我们安全计划相关的安全文档,如政策、标准、基线和标准操作程序
指导和培训更初级的工程师或分析师
最低资格要求
计算机科学、信息技术、网络安全或相关领域的学士/学士学位(或更高),8年安全领域经验(无学位)
4年以上在团队环境中担任可信顾问的经验,解决短期和长期业务价值
4年以上指导其他工程师或分析师的经验
数据安全
熟悉现代云数据平台(例如Postgres、Snowflake、Databricks、AWS S3)和数据架构(数据仓库、数据湖、湖仓一体)。
熟悉数据发现、分类和目录工具或框架。
了解保护PII/PHI和与医疗数据相关的法规要求(例如HIPAA)及数据隐私。
至少掌握一种脚本或编程语言(例如Python)用于自动化和集成。
熟悉正则表达式模式和脚本编写
具备良好的协作和沟通能力,能够有效与跨职能团队合作。
优先考虑的技能和经验
在医疗行业具有使用医疗科技系统(如电子健康记录、临床数据等)的工作经验
具有专注于工具开发、自动化和分布式系统开发的经验
查看英文原文
As a Senior Security Engineer II at Aledade, we play a central role in helping secure our enterprise, cloud native environments, and applications. We’re looking for security engineers that understand data and automation are important ingredients to our mission and know how to actively employ these ingredients at scale. Beyond the technical expertise, we value individuals who can partner cross-functionally across various teams, driving impactful outcomes and further securing our digital landscape.
Primary Duties
Working cross functionally to design, build, and operate solutions that continuously improve and automate our security capabilities
Leveraging data to understand trends, metrics, and opportunities to improve our security posture and then helping execute on those opportunities with stakeholders
Leading and enhancing incident response efforts, spearheading analysis, containment, and mitigation strategies in a cross-functional environment to ensure effective resolution and remediation of security incidents
Helping craft and refine security documentation pertinent to our Security Program, such as policies, standards, baselines, and standard operating procedures
Mentoring and coaching more junior engineers or analysts
Minimum Qualifications
BS / BTech (or higher) in Computer Science, Information Technology, Cybersecurity or a related field, 8 years security domain experience without degree
4+ years of experience acting as a trusted advisor in a team setting, solving for short-term and long-term business value
4+ years of experience coaching other engineers or analysts
Data Security
Experience with modern cloud data platforms (e.g., Postgres, Snowflake, Databricks, AWS S3) and data architectures (data warehouses, data lakes, lakehouses).
Experience with data discovery, classification, and cataloging tools or frameworks.
Understanding of protecting PII/PHI and regulatory requirements relevant to healthcare data (e.g., HIPAA) and data privacy.
Proficiency in at least one scripting or programming language (e.g., Python) for automation and integration.
Experience with regex patterns and scripting
Strong collaboration and communication skills, with the ability to partner effectively with cross-functional teams.
Preferred KSA’s
Prior experience working in the healthcare industry with health-tech systems, like Electronic Health Records, Clinical data, etc.
Prior experience with a focus on tooling, automation, and distributed systems development is preferred.
Experience generating automated metrics to measure service and program effectiveness and consistency
Strong communication skills, both written and verbal, with the capability to articulate complex technical issues to a diverse audience
Data Security
Experience with Data Security Posture Management platforms or DSPM tooling (e.g., Wiz DSPM, BigID, Cyera, Bedrock Data, etc.)
Experience integrating security controls into data pipelines and ETL/ELT workflows.
Familiarity with legal hold processes, data retention, and lifecycle management.
Experience working in healthcare, health tech, or other highly regulated environments.
Physical Requirements
Sitting for prolonged periods of time. Extensive use of computers and keyboard. Occasional walking and lifting may be required.
Who We Are:
Aledade PBC, a public benefit corporation, exists to empower the most transformational part of our health care landscape - independent primary care. We were founded in 2014, and since then, we've become the largest network of independent primary care in the country - helping practices, health centers and clinics deliver better care to their patients and thrive in value-based care. Additionally, by creating value-based contracts across a wide variety of health plans, we aim to flip the script on the traditional fee-for-service model. Our work strengthens continuity of care, aligns incentives and ensures primary care physicians are paid for what they do best - keeping patients healthy. If you want to help create a health care system that is good for patients, good for practices and good for society - and if you're eager to join a collaborative, inclusive and remote-first culture - you've come to the right place.
What Does This Mean for You?
At Aledade PBC, you will be part of a creative culture that is driven by a passion for tackling complex issues with respect, open-mindedness and a desire to learn. You will collaborate with team members who bring a wide range of experiences, interests, backgrounds, beliefs and achievements to their work - and who are all united by a shared passion for public health and a commitment to the Aledade mission.
In addition to time off to support work-life balance and enjoyment, we offer the following comprehensive benefits package designed for the overall well-being of our team members:
Flexible work schedules and the ability to work remotely are available for many roles
Health, dental and vision insurance paid up to 80% for employees, dependents and domestic partners
Robust time-off plan (21 days of PTO in your first year)
Two paid volunteer days and 11 paid holidays
12 weeks paid parental leave for all new parents
Six weeks paid sabbatical after six years of service
Educational Assistant Program and Clinical Employee Reimbursement Program
401(k) with up to 4% match
Stock options
And much more!
At Aledade PBC, we don’t just accept differences, we celebrate them! We strive to attract, develop and retain highly qualified individuals representing the diverse communities where we live and work. Aledade is committed to creating a diverse environment and is proud to be an equal opportunity employer. Employment policies and decisions at Aledade are based on merit, qualifications, performance and business needs. All qualified candidates will receive consideration for employment without regard to age, race, color, national origin, gender (including pregnancy, childbirth or medical conditions related to pregnancy or childbirth), gender identity or expression, religion, physical or mental disability, medical condition, legally protected genetic information, marital status, veteran status, or sexual orientation.