{"id":3345185,"url":"https://alion.io/job/avalon-principal-security-engineer","title":"Principal Security Engineer","company":{"id":2065039,"name":"Avalon","domain":"avalonhcs.com","url":"https://alion.io/company/avalonhcs","size_band":"501-1000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"ADP","truth_index":{"grade":"B","score":75,"open_postings":3,"ghost_share":0,"stale_share":1,"repost_share":0,"time_to_fill_p50_days":48,"computed_at":"2026-10-29T05:49:05Z"}},"role":"Security","role_family":"Security","seniority":"lead","employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"board_field","remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Tampa, United States"],"countries":["US"],"hiring_countries":["US"],"hiring_countries_total":1,"salary":null,"salary_estimate":{"min_usd":123000,"max_usd":243000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":103},"experience_years_min":6,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Amazon CloudWatch","optional":false},{"name":"Amazon EC2","optional":false},{"name":"Amazon ECS","optional":false},{"name":"Amazon S3","optional":false},{"name":"API Gateway","optional":false},{"name":"AWS","optional":false},{"name":"AWS Bedrock","optional":false},{"name":"AWS Fargate","optional":false},{"name":"AWS Lambda","optional":false},{"name":"CI/CD","optional":false},{"name":"CloudFormation","optional":false},{"name":"Datadog","optional":false},{"name":"HIPAA","optional":false},{"name":"IAM","optional":false},{"name":"LLM Guardrails","optional":false},{"name":"OpenSearch","optional":false},{"name":"Platform Engineering","optional":false},{"name":"SIEM","optional":false},{"name":"Snowflake","optional":false},{"name":"Snyk","optional":false},{"name":"Terraform","optional":false},{"name":"Amazon EKS","optional":true},{"name":"Crowdstrike","optional":true},{"name":"Kubernetes","optional":true}],"status":"closed","first_seen_at":"2026-10-27T16:57:21Z","employer_posted_date":"2026-10-27","last_verified_at":"2026-10-28T07:20:12Z","board_verified":false,"closed_at":"2026-10-28T07:20:12Z","days_open":0,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":0},"description":"About Avalon Healthcare Solutions:\nAvalon Healthcare Solutions is the nation’s leader in diagnostic intelligence, uniquely focused on transforming the role of diagnostic testing across the healthcare ecosystem. Our proprietary Diagnostic Insights Platform delivers evidence-based policies, curated lab networks, and real-time analytics that simplify complex diagnostics, accelerate innovation adoption, and optimize diagnostic investments.\nSupporting over 30 health plans and 100 million members nationwide, Avalon partners with payers and providers to ensure diagnostic testing is performed appropriately, efficiently, and at the right time. Our flexible solutions span routine and genetic testing management, automated adherence, and end-to-end diagnostics support-driving measurable value, reduced waste, and improved clinical outcomes.\nWith unmatched scientific rigor, deep clinical expertise, and a performance-based model, Avalon is redefining how diagnostics power personalized care and healthcare value. You will be part of a team that shapes a new market and business. Most importantly, you will help Avalon to achieve its mission and improve clinical outcomes and health care affordability for the people we serve.\nFor more information about Avalon, please visit www.avalonhcs.com.\nAvalon Healthcare Solutions is an Equal Opportunity Employer - Vet/Disability.\nThis position description is subject to change at any time. As determined by the company based upon business needs, an employee in this position may be required to perform duties and take responsibility for work other than as described in this document.\nAbout the Principal Security Engineer Position:\nThe Principal Security Engineer serves as the organization's senior technical authority for cloud, application, data, and enterprise security, providing strategic leadership and engineering expertise in support of Avalon's information security, technology, and business objectives. This role is responsible for defining security architecture, establishing security engineering standards, identifying and mitigating systemic risk, and leading the design and implementation of enterprise security controls across a predominantly AWS-based healthcare technology environment.\nThe Principal Security Engineer partners closely with Information Security, Platform Engineering, Cloud Operations, Platform Reliability, Software Engineering, Data Engineering, and Enterprise Architecture teams to ensure security requirements are effectively integrated into technology solutions and operational processes. This position is responsible for translating regulatory, compliance, and organizational security requirements, including HITRUST and HIPAA standards, into scalable technical controls that support secure, reliable, and compliant business operations.\nAs a senior individual contributor and subject matter expert, the Principal Security Engineer leads complex security initiatives, drives the implementation of security controls and remediation efforts, and provides technical leadership to support secure, resilient, and compliant technology solutions across the organization.\nThis position is eligible for remote work, but quarterly travel will be required to Avalon’s corporate office located in Tampa, Florida.\nPrincipal Security Engineer - Essential Functions and Responsibilities:\nCloud Security Architecture\nServe as a senior technical authority for security across a multi-account AWS environment.\nDesign and maintain security architecture for AWS Organizations, Control Tower, IAM, VPCs, EC2, ECS/Fargate, S3, Lambda, API Gateway, RDS, OpenSearch, Bedrock and other AWS services.\nEstablish and improve AWS account, OU, network, workload and security boundaries.\nDesign preventative controls using Service Control Policies (SCPs), IAM policies, permission boundaries, resource policies and AWS Config controls.\nDevelop secure patterns for IAM roles, cross-account access, workload identities and privileged administrative access.\nReview cloud architectures and provide practical security guidance during design rather than relying exclusively on post-deployment findings.\nDevelop strategies for workload isolation, network segmentation, private connectivity and controlled Internet egress.\nEstablish security patterns for emerging workloads including AI/ML and generative AI.\nSecurity Engineering & Automation\nBuild security controls using Terraform.\nDevelop automated detection and remediation for common security findings.\nIntegrate security controls with Snyk into CI/CD and deployment pipelines.\nPartner with Platform Reliability and Cloud Operations to make security remediation part of normal engineering operations.\nDevelop reusable security modules, policies and reference architectures.\nAutomate evidence collection and technical compliance validation where practical.\nDetection, Response & Vulnerability Management\nProvide senior technical leadership during security incidents and complex investigations.\nImprove detection capabilities using AWS Security Hub, GuardDuty, CloudTrail, CloudWatch, Datadog/SIEM and related telemetry.\nDevelop security monitoring and alerting standards with a focus on actionable signals rather than alert volume.\nProvide security architecture and engineering guidance for Snowflake and AWS-hosted data platforms.\nPartner with GRC to provide technical interpretation of control requirements.\nTechnical Leadership\nPartner with Avalon principals in other tech areas to audit, evolve, and grow our technical standards, representing the security perspective.\nProvide mentorship and education to help the entire IT organization grow their security knowledge and skills.\nAI & Emerging Technology Security\nDevelop security architecture and guardrails for Amazon Bedrock, open-weight models and other generative AI technologies.\nDevelop patterns for isolating AI workloads and protecting PHI and proprietary information.\nEvaluate risks involving model access, prompt/data leakage, third-party model providers and AI supply chains.\nDrive difficult technical problems through investigation, design, implementation and operational adoption.\nRaise the security capabilities of engineering teams through documentation, automation and reusable patterns.\nRemain hands-on with technology while providing organization-level technical leadership.\nPrincipal Security Engineer - Minimum Qualifications:\nMinimum years of relevant work experience: 6+ years in security engineering, cloud engineering, infrastructure engineering, DevSecOps, or related disciplines.\nRequired certification: None required.\nSignificant hands-on experience securing production AWS environments.\nDeep understanding of AWS IAM, Organizations, SCPs, VPC networking, KMS, S3 and workload security.\nExperience securing EC2, containerized and serverless workloads.\nStrong understanding of network security, identity, encryption and secrets management.\nExperience with infrastructure-as-code such as Terraform or CloudFormation.\nExperience integrating security controls into CI/CD pipelines.\nStrong scripting or software automation capabilities.\nExperience with vulnerability management and security remediation.\nExperience with security monitoring, logging and incident investigation.\nAbility to independently analyze complex architectures and identify meaningful security risks.\nPrincipal Security Engineer - Preferred Qualifications:\nExperience operating in a healthcare, financial services or similarly regulated environment.\nPractical experience with HITRUST and HIPAA.\nExperience securing Snowflake.\nExperience with AWS Security Hub, GuardDuty, CloudTrail, AWS Config and Control Tower.\nExperience with container security involving ECS, Fargate, EKS or Kubernetes.\nExperience with Datadog, SIEM platforms or enterprise observability systems.\nExperience with Harness or comparable CI/CD platforms.\nExperience with Tenable, CrowdStrike or similar vulnerability and endpoint security technologies.\nExperience designing multi-account AWS security architectures.\nExperience with AWS Backup, immutable storage and disaster-recovery security controls.\nExperience securing Bedrock, generative AI or self-hosted/open-weight AI models.\nExperience developing automated security remediation.\nAWS Security Specialty, AWS Solutions Architect Professional, CISM, CISSP or comparable certifications are beneficial but not required.","description_format":"text","description_chars":8383,"description_truncated":false,"requirements":{"experience_years_min":6,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Health Care","Genomics & Genetic Testing","Medical Laboratories","Health Insurance & Benefits"],"lifecycle":[{"event":"open","at":"2026-10-27T16:57:21Z"},{"event":"close","at":"2026-10-28T07:20:12Z"}],"visa":[],"liveness":null,"pay":null,"html_url":"https://alion.io/job/avalon-principal-security-engineer","json_url":"https://alion.io/job/avalon-principal-security-engineer.json","meta":{"generated_at":"2026-10-29T07:31:17Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":11420,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-30T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":2065039},"rest":"https://alion.io/mcp/rest/get_company?id=2065039"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Favalon-principal-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Favalon-principal-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Favalon-principal-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/avalon-principal-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Favalon-principal-security-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3345185}},{"tool":"search_jobs","arguments":{"company":"avalonhcs.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3345185},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}