Software Engineer (Security) - Tech Foundations

Engineering – Application Security Crew (Tech Foundations)

We are looking for an experienced Application Security Engineer to build, evolve and operate foundational security building blocks and secure‑by‑default patterns that make Alan’s products safe by design, highly available and easy to ship. The role is an integral part of the Tech Foundations team, enabling product crews with world‑class infrastructure and operational excellence.

Scope / Responsibilities

• Design, build and operate the authentication stack on our self‑hosted identity provider, moving toward passwordless solutions with excellent UX.
• Develop and maintain end‑to‑end encryption components used by Alan Clinic, ensuring frictionless security for members.
• Evolve and run the secure file exchange platform to support product and ops teams.
• Contribute to the foundations of a secure enclave for medical secrecy, isolating sensitive data without sacrificing usability.
• Build engineering‑wide security practices and tooling (secure CI/CD, vulnerability remediation, AI/LLM safety, etc.) that enable every engineer to ship safely.

Qualifications

• 3+ years in full‑stack software engineering roles.
• Experience designing systems, APIs, libraries, or frameworks used by other engineers.
• Proven track record of shipping, owning, and operating production systems (rollouts, on‑call, incident response).
• Hands‑on experience shipping secure features, fixing vulnerabilities, designing authentication/crypto flows, or championing secure‑by‑default patterns.
• Fluency in English; proficiency in French is not required.

Mindset & Culture Fit

• Treat security engineering as product work; use clear communication and architectural framing to make trade‑offs legible to non‑security engineers.
• Write code and ship it to production yourself, then operate it: rollouts, alerting, on‑call, incident response.
• Enable product crews by providing reusable patterns—guardrails, libraries, secure‑by‑default abstractions—to accelerate secure feature delivery.
• Emphasize high potential and curiosity; show how you learn and grow.

How We Work

• Location: Must be legally eligible to work in France, Belgium, or Spain.
• Remote work: Remote flexibility is available; in‑person collaboration is highly valued.

We hire people, not roles. If you’re excited about this opportunity but don’t meet every bullet, we’d love to hear from you. Everyone, no matter how underrepresented, should feel free to apply.