Sr Product Security Architect

Datavant

12d • $184,000 - $230,000

About The Position

As a Sr Product Security Architect at Datavant, you will play a key role in shaping the security posture of our products. You will lead secure architecture and design reviews across Datavant’s portfolio of applications, ensuring that security is embedded throughout the software development lifecycle. Partnering closely with engineering teams, product leadership, and compliance stakeholders, you will provide expert guidance on risk mitigation, make prioritized and actionable security recommendations, and help translate complex regulatory and compliance requirements into practical technical controls.

Requirements

• Hands-on experience developing in multiple programming languages.
• Strong command of programming and ability to quickly adapt to new technologies.
• Deep understanding of Application and Cloud security.
• Strong understanding of security controls, both those in audit standards and practical controls for application development environments in AWS and/or Azure.
• Ability to understand the tradeoffs between ideal security and what is necessary to appropriately secure a legacy system.
• Focus on delivery and impact, operating effectively in a fast-paced environment where the security team is a partner and enabler for the engineering team.
• 6+ years of working in architectural and threat modeling review areas.
• 6+ years of working with compliance standards, with practical knowledge of applying standards in low friction ways.

Nice To Haves

• Experience with security in healthcare or other highly regulated spaces (e.g., HIPAA, HITRUST, SOC 2, PCI, FedRamp from an operational response standpoint).

Responsibilities

• Review projects our development teams build, including secure code reviews and understanding the broad architecture of systems being built.
• Provide control feedback in a review environment to development teams, applying knowledge to practical risk management.
• Own and conduct security/threat model reviews and provide expertise on security architecture-related topics.
• Own new projects for advancing security in our environment, acting as the deep technical expert and collaborating with others to ensure project success.
• Facilitate quarterly planning discussions by providing strategic prioritization of all security-related requests, including architectural feedback, vulnerability remediation, and compliance control implementation.
• Document security control descriptions and processes in a way that enables development teams to move faster with more clarity.

Benefits

• Total rewards strategy that powers a high-growth, high-performance, health technology company.
• Opportunity to transform health care through creating industry-defining data logistics products and services.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed