• The Sr Information Security Engineer is responsible for designing, implementing, and continuously improving the technical security controls that protect internally developed applications, including cloud systems, containerized, and serverless workloads. • This role is a hands-on application security specialist who performs deep secure code reviews, leads threat modeling, and drives remediation of complex vulnerabilities across the SDLC. • Collaborating with other technical teams, this role ensures secure application development, deployment, and operation by assessing maturity, defining security requirements and guardrails, and delivering prioritized recommendations to improve pipeline controls, tooling, and integrations within the DevSecOps pipeline. • Key responsibilities include conducting application security assessments, guiding secure software development practices, and advancing the maturity of application security capabilities. • The Information Security Engineer partners with development, operations, and security teams to embed security into development practices and responds as a subject matter expert during application-related security incidents.

• Leading the planning, installation and integration of the Guardicore product in diverse infrastructure environments • Working with customers throughout a delivery project life cycle from project management and architecture design to installation, configuration and documentation • Deploying and implementing network segmentation policies using our state of the art segmentation platform • Delivering advanced professional services such as customizations / training / expansions / configurations / optimizations • Working closely with Support and Engineering teams to quickly resolve any client issues and drive customer post-sales satisfaction

• Joining Alan as a Security Software Engineer team means you're at the forefront of protecting sensitive health data and ensuring our systems are resilient against threats. • Tech Foundations enables product crews and creates the environment to thrive—combining world-class infrastructure, intuitive developer experience, exquisite operational excellence, and built-in security to make shipping exceptional products effortless. • Infrastructure enablement for product crews (e.g. hosting improvements, CI/CD, scalability, multi-cloud architecture) • Security and compliance facilitation (e.g. authentication, encryption, threat protection) • Developer productivity enhancements (e.g. local environment setup, monorepo tooling, observability, tech stack evolution) • Design and development unification (e.g. design system, accessibility) • AI-assisted engineering enablement (e.g. agentic development, code assistants, MCP servers)

• Help people live in good health to 100 while helping employers feel proud, turning health benefits from a cost centre into their most valuable investment. • Connect all aspects of care (private, public, and direct to consumer) to create the most member-centric healthcare experience, reducing claims costs while generating new monetization opportunities. • Build the infrastructure, interfaces, and applications to provide first-class service to members, health professionals, and even themselves! • Engage in security to protect sensitive health data and ensure systems are resilient against threats. • Participate in designing and developing unification (e.g. design system, accessibility) and enhancements for developer productivity. • Contribute to a revisited multi-cloud strategy as the team grows significantly and elevate the security stack and posture with enhanced tools and processes.