Senior Security Engineer | NYC Hybrid

Allara is a telemedicine platform delivering expert, multidisciplinary healthcare for women with hormonal conditions, covered by many insurance plans. Allara's comprehensive Telehealth platform pairs patients with a dedicated care team to provide expert medical guidance, nutrition and lifestyle coaching, and personalized treatment plans that go beyond the basics. As one of the fastest-growing women's health platforms in the US, Allara provides innovative, high-quality care while addressing long-overlooked gaps in the healthcare system for women with hormonal health needs.

About the Role

As a critical member of our engineering team and our first dedicated Senior Security Engineer, you'll be pivotal in safeguarding our care delivery platform and ensuring the confidentiality and integrity of sensitive patient data while ensuring that we're still able to build and scale rapidly. You'll be instrumental in designing and maintaining a robust security posture as we deliver accessible and personalized care. This is a chance to be a foundational leader in our security efforts, with significant opportunities for professional growth and influence as we scale.

Hybrid (NYC): We value in-person collaboration and aim for at least three days per week in our NYC office, with flexibility as needed.

What You'll Do

• Design, implement, and manage security infrastructure and controls to protect our platform and data.
• Conduct or oversee regular security assessments, vulnerability scans, and penetration tests to identify and mitigate risks.
• Develop and maintain security policies, procedures, and standards to ensure compliance with relevant regulations (e.g., HIPAA, SOC2).
• Implement and manage security monitoring and alerting systems to detect and respond to security incidents.
• Lead incident response and forensic investigations for security breaches and incidents.
• Provide security training and awareness to employees to foster a security-conscious culture.
• Evaluate and recommend security tools and technologies to enhance our security posture.
• Ensure the security and compliance of our cloud infrastructure (AWS, GCP).

Who You Are

We are looking for a seasoned security professional with proven experience in security engineering and a passion for protecting sensitive data. We value diverse experiences and perspectives. Experienced with cloud security and security best practices.

• Experienced with security tools and technologies (e.g., SIEM, IDS/IPS, vulnerability scanners).
• Knowledgeable about security frameworks and standards (e.g., NIST, ISO 27001, HIPAA).
• Experienced with incident response and forensic investigations.
• Knowledgeable about IAM and access control.
• Excited to work across all layers of a platform, diving into whatever is needed.
• An excellent collaborator and communicator with a demonstrated ability to work effectively with cross-functional teams and other engineers.
• Able to analyze complex systems and troubleshoot security issues effectively.
• Passionate about improving system security and compliance.

Nice to Haves/Bonus Points

• Experience in regulated industries, particularly healthcare..
• Experience working in fast-paced startup environments.
• Experience with security compliance audits and assessments.
• Security certifications (e.g., CISSP).

What Allara Offers

Compensation & Career Growth

• Competitive salary with opportunities for advancement
• Equity
• Professional development & employee learning programs

Work Environment & Flexibility

• Hybrid (3 days in our NYC office)
• Unlimited PTO & 11 company holidays
• Annual onsite in NYC

Health & Wellness

• Medical, dental, and vision benefits
• Health Savings Account (HSA) & Flexible Spending Account (FSA)
• Long- and short-term disability coverage
• Annual employee wellness stipend

Family & Future Planning

• 401(k) plan
• Parental leave & family planning support benefits

Additional Perks

• Company-issued laptop
• Annual work-from-home stipend
• Commuter benefits (if applicable)
• A collaborative, mission-driven culture focused on improving patient care

At Allara, we believe in celebrating everything that makes us human and are proud to be an equal-opportunity workplace. We embrace diversity and are committed to building a team that represents a variety of backgrounds, perspectives, and skills. We believe that the more inclusive we are, the better we can serve our members. We're an Equal Opportunity Employer and do not discriminate against candidates or patients based on race, color, gender, sexual orientation, gender identity or expression, age, religion, disability, national origin, protected veteran status, or any other status protected by applicable federal, state, or local law.