Software Engineer (Security) - Tech Foundations

The Stack

Python/Flask, Typescript, React, React Native, on the coding side. AWS, GCP, Kubernetes, Keycloak, PostgreSQL, Redis, Terraform/Terramate, Datadog, Cloudflare, GitHub Actions on the platform side, all in a monorepo. We deploy daily and believe in distributed ownership - you build it, you own it.

Application Security crew - within Tech Foundations area

Mission

• Tech Foundations - enables product crews and creates the environment to thrive—combining world‑class infrastructure, intuitive developer experience, exquisite operational excellence, and built‑in security to make shipping exceptional products effortless.
• Application Security - is one of its crews. Its mission: build, evolve and operate the foundational security building blocks and secure‑by‑default patterns that make Alan’s products safe by design , highly available , and easy to ship , while partnering with product teams and Security Operations to reduce real risk without turning security into a bottleneck.

Scope

• Security core components in the product
  • Authentication - design, build and operate the authentication stack on top of our self‑hosted identity provider. Our goal is to go passwordless with great UX and unblock strategic initiatives relying on this stack.
  • Encryption - build, evolve and operate our end‑to‑end encryption component used by our Alan Clinic while keeping it delightful and frictionless for our members.
• Security platforms
  • Secure file exchange - evolve and operate our secure file exchange platform to unblock product/ops teams while bringing support when relevant.
  • Secure enclave for medical secrecy - contribute to the foundations to isolate and protect highly sensitive medical data without sacrificing usability or delivery speed.
• Contribute to engineering‑wide security practices by building tools and patterns that help every engineer ship safely (secure CI/CD, vulnerability remediation tooling, AI/LLM safety, etc.).

Experience we value

• 3+ years in full‑stack software engineering roles
• Experience designing systems, APIs, libraries, or frameworks used by other engineers
• You've shipped, owned, and operated production systems (rollouts, on‑call, incidents)
• You've shipped secure features, fixed vulnerabilities, designed auth/crypto flows, or championed secure‑by‑default patterns in past teams
• You love turning complex problems into elegant secure solutions
• You care about creating secure‑by‑design products while keeping delightful experiences

Mindset we value

• You treat security engineering as product work : engineers & members are your customers, and security should feel effortless.
• You’re hands‑on : writing code is the bulk of the job (Python, TypeScript, Terraform). You ship what you write to production yourself, then operate it: rollouts, alerting, on‑call, incident response.
• You design and communicate : you're as comfortable writing a framing, drawing a sequence diagram, and aligning 3 product crews on an auth migration as you are writing the code. You make complex security tradeoffs legible to non‑security engineers.
• You're an enabler : you measure your impact by how fast product crews ship secure features without ever consulting you. The harder you've worked, the less they have to engage you.
• You build reusable patterns : guardrails, libraries, and secure‑by‑default abstractions that prevent vulnerabilities at scale.
• You’re fluent in English (French is not required).

How we work

• Location : You must be legally eligible to work in France, Belgium, or Spain.
• Remote work : We offer remote work flexibility, but we value in‑person collaboration.

Perks & Benefits

• Perks & Benefits : Alaners are provided with a stimulating environment and perks ensuring they are happy, efficient and spend only high‑quality time with co‑workers.
• A strong culture : People joining Alan are often surprised and delighted by our innovative working method. We have a set of cultural values that guide our approach to work.