Senior Security Engineer

Responsibilities

• Lead security design reviews for new and existing systems to drive secure architecture decisions.
• Perform threat modeling for services and platforms, translating threats into actionable engineering requirements.
• Define and implement data protection strategies, including classification, encryption, and key management.
• Review application architectures and APIs for security weaknesses and design flaws.
• Conduct third-party and vendor security assessments to identify and mitigate risks.
• Partner with engineering teams to remediate findings and establish secure design patterns.
• Integrate security into design and development workflows through shift-left practices.
• Evaluate and secure AI/ML use cases, addressing risks like data leakage and prompt injection.

Requirements

• 8–12+ years of experience in security engineering or application security.
• Strong expertise in threat modeling and secure system design.
• Deep understanding of application security principles (OWASP Top 10, API security).
• Strong knowledge of data protection, privacy concepts, and authentication/authorization mechanisms.
• Proven experience conducting architecture and design-level security reviews.
• Ability to read and understand code across common programming languages.
• Excellent communication skills to influence engineering teams and stakeholders.

Preferred Qualifications

• Experience working in cloud environments, specifically Azure.
• Familiarity with secure SDLC practices and DevSecOps tooling.
• Experience working within highly regulated environments such as healthcare or finance.
• Knowledge of specific AI/ML security risks.
• Relevant industry certifications such as CISSP or CSSLP.

About the Company

Truveta provides unprecedented real-world data and real-time intelligence, powered by a dataset built with and owned by US health systems united in a mission of Saving Lives with Data. Together, we power breakthrough medical discoveries, accelerate regulatory-grade evidence, and improve patient care. Today, Truveta enables research on more than 130 million de-identified patients across the US.