Senior Security Engineer II - DSPM

Aledade, Inc. is a public benefit corporation focused on transforming independent primary care. The Senior Security Engineer II will play a central role in securing enterprise, cloud native environments and applications, working cross-functionally to enhance security capabilities and responding to security incidents.

Responsibilities:

• Working cross functionally to design, build, and operate solutions that continuously improve and automate our security capabilities
• Leveraging data to understand trends, metrics, and opportunities to improve our security posture and then helping execute on those opportunities with stakeholders
• Leading and enhancing incident response efforts, spearheading analysis, containment, and mitigation strategies in a cross-functional environment to ensure effective resolution and remediation of security incidents
• Helping craft and refine security documentation pertinent to our Security Program, such as policies, standards, baselines, and standard operating procedures
• Mentoring and coaching more junior engineers or analysts

Requirements:

• BS / BTech (or higher) in Computer Science, Information Technology, Cybersecurity or a related field, 8 years security domain experience without degree
• 4+ years of experience acting as a trusted advisor in a team setting, solving for short-term and long-term business value
• 4+ years of experience coaching other engineers or analysts
• Experience with modern cloud data platforms (e.g., Postgres, Snowflake, Databricks, AWS S3) and data architectures (data warehouses, data lakes, lakehouses)
• Experience with data discovery, classification, and cataloging tools or frameworks
• Understanding of protecting PII/PHI and regulatory requirements relevant to healthcare data (e.g., HIPAA) and data privacy
• Proficiency in at least one scripting or programming language (e.g., Python) for automation and integration
• Experience with regex patterns and scripting
• Strong collaboration and communication skills, with the ability to partner effectively with cross-functional teams
• Prior experience working in the healthcare industry with health-tech systems, like Electronic Health Records, Clinical data, etc
• Prior experience with a focus on tooling, automation, and distributed systems development is preferred
• Experience generating automated metrics to measure service and program effectiveness and consistency
• Strong communication skills, both written and verbal, with the capability to articulate complex technical issues to a diverse audience
• Experience with Data Security Posture Management platforms or DSPM tooling (e.g., Wiz DSPM, BigID, Cyera, Bedrock Data, etc.)
• Experience integrating security controls into data pipelines and ETL/ELT workflows
• Familiarity with legal hold processes, data retention, and lifecycle management
• Experience working in healthcare, health tech, or other highly regulated environments