{"id":3870694,"url":"https://alion.io/job/flo-health-security-architect","title":"Security Architect","company":{"id":51646,"name":"Flo Health","domain":"flo.health","url":"https://alion.io/company/flo-health","size_band":"51-200","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":{"grade":"A","score":85,"open_postings":12,"ghost_share":0,"stale_share":0.583,"repost_share":0,"time_to_fill_p50_days":40,"computed_at":"2026-11-09T06:03:00Z"}},"role":"Security","role_family":"Security","seniority":"staff","employment_type":null,"work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Vilnius, Lithuania"],"countries":["LT"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":7,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AI Agents","optional":false},{"name":"AWS","optional":false},{"name":"CI/CD","optional":false},{"name":"Cloudflare","optional":false},{"name":"Function Calling","optional":false},{"name":"Go","optional":false},{"name":"ISO 27001","optional":false},{"name":"LLM","optional":false},{"name":"LLM Guardrails","optional":false},{"name":"Model Context Protocol","optional":false},{"name":"OWASP Top 10","optional":false},{"name":"Python","optional":false},{"name":"Scala","optional":false},{"name":"Terraform","optional":false},{"name":"SOC 2","optional":true}],"status":"live","first_seen_at":"2026-11-06T12:57:07Z","employer_posted_date":"2026-11-06","last_verified_at":"2026-11-09T05:06:02Z","board_verified":true,"closed_at":null,"days_open":2,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":2},"description":"500M+ downloads. 80M+ monthly users. A decade of building - and we’re still accelerating.\nFlo is the world’s #1 health & fitness app worldwide on a mission to build a better future for female health. Backed by a $200M investment led by General Atlantic, we became the first product of our kind to reach a $1B valuation in 2024 - and we’re not slowing down.\nWith 7M paid subscribers and the highest-rated experience in the App Store’s health category, we’ve spent 10 years earning trust at scale. Now, we’re building the next generation of digital health - AI-powered, privacy-first, clinically backed - to help our users know their body better.\nThe job\nMillions of people trust Flo with their most personal health data. As our Security Architect, you’ll make sure we deserve that trust. This is a hands-on individual contributor role. You’ll work side by side with engineering, product and platform teams to shape secure architectures and build the guardrails that let both humans and AI coding agents ship quickly and safely. The role combines security architecture, product and application security engineering and security risk expertise: you will set secure patterns and standards, lead threat modelling and design reviews, embed security into the SDLC and CI/CD, and translate security risk into clear, pragmatic decisions. \nWhat you’ll do\nShape secure architecture from day one. Partner with teams early in design, lead security design reviews for new services and major changes, and record key decisions and risk trade-offs.\nBuild security harnesses for human and AI-agent development. Design guardrails, sandboxing, least-privilege access for agents and tools, secrets handling, policy-as-code and automated checks that run inside developer and agent workflows.\nLead on AI and agentic security. Define secure patterns for LLM integrations, MCP servers and tool use, and tackle risks like prompt injection, data leakage, excessive agency and supply-chain compromise.\nCreate paved roads. Publish reusable patterns, reference architectures and standards that teams adopt because they’re the easiest option.\nScale threat modelling. Build tools and skills that let engineers run threat models themselves, and carry out internal security assessments.\nRemove whole classes of vulnerabilities. Automate vulnerability triage and investigation, find systemic root causes, and feed the fixes back into patterns and guardrails.\nTurn risk into clear decisions. Explain security risk in pragmatic terms so the business can prioritise based on risk and value.\nAdvise and enable. Be a trusted partner to engineering, product and leadership, coach engineers, and help evaluate third-party and AI tools so they can be adopted securely. Support ISO 27001/27701 so that controls are built into how we engineer, not bolted on afterwards.\nWhat you’ll bring\n7+ years in security engineering, application/product security or security architecture, including hands-on work securing cloud-native systems\nDeep knowledge of Secure SDLC: threat modelling, security testing, app security review and CI/CD security\nHands-on experience with AWS and Cloudflare (or equivalents) and Terraform or similar IaC\nA strong grasp of the OWASP Top 10 and the ability to assess exploitability and impact\nSolid coding skills (e.g. Python, Go, Scala) and experience building security tooling or automation\nPractical understanding of the risks in AI-assisted and agentic development and LLM applications (e.g. OWASP Top 10 for LLMs)\nExperience with security risk analysis and risk management methods\nThe ability to explain trade-offs clearly to engineers and senior stakeholders, and to win people over\nNice to have\nExperience building guardrails, sandboxes or policy-as-code (e.g. OPA) for developer platforms or AI coding agents\niOS or Android security experience\nExperience with ISO 27001, ISO 27701 or SOC 2 audits\nA background in health tech, femtech or another regulated, privacy-sensitive industry\nCertifications or degrees such as CISSP, CCSP, OSCP or an MSc in Information Security\nWhy Flo\nYou’ll protect data that matters deeply to millions of people. You’ll also help set the standard for how a company adopts agentic engineering safely, and you’ll have real ownership: you design and build the first version, then hand it off to the teams who will run it.\nSalary Range - gross per month (ranges may vary based on skills and experience)\n€8.000—€10.000 EUR\nHow we work\nWe’re a mission-led, product-driven team. We move fast, stay focused and take ownership - from brief to build to impact. Debate is encouraged. Decisions are shared. We care about craft, ship with purpose, and always raise the bar.\nYou’ll be working with people who take their work seriously, not themselves. It takes commitment, resilience, and the drive to keep going when things get tough. Because better health outcomes are worth it. \nWhat you'll get\nWe support impact with meaningful reward. Here’s what that looks like:\nCompetitive salary and annual reviews\nOpportunity to participate in Flo’s performance incentive scheme\nPaid holiday, sick leave, and female health leave\nEnhanced parental leave and pay for maternity, paternity, same-sex and adoptive parents\nAccelerated professional growth through world-changing work and learning support\nIn-person collaboration and work in a hybrid model, with 3 days per week spent in the office\n5-week fully paid sabbatical at 5-year Floversary\nFlo Premium for friends & family, plus more health, pension and wellbeing perks\nDiversity, equity and inclusion\nOur strength is in our differences. At Flo, hiring is based on merit, skill and what you bring to the role - nothing else. We’re proud to be an equal opportunity employer, and we welcome applicants from all backgrounds, communities and identities. Read our privacy notice for job applicants.","description_format":"text","description_chars":5834,"description_truncated":false,"requirements":{"experience_years_min":7,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Equity","Parental leave"],"hiring_locations":[{"name":"Lithuania","iso":"LT","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Women’s Health & Maternity","Consumer Health Apps"],"lifecycle":[{"event":"open","at":"2026-11-06T14:19:23Z"}],"visa":[],"liveness":{"score":63,"band":"ok","label":"Likely open","p_open":1,"p_active":0.632,"p_room":1,"age_days":2,"expected_fill_days":40,"reasons":["conf:0","stale_co","velocity","win:early"],"computed_at":"2026-11-09T06:03:00Z"},"pay":null,"html_url":"https://alion.io/job/flo-health-security-architect","json_url":"https://alion.io/job/flo-health-security-architect.json","meta":{"generated_at":"2026-11-09T06:26:51Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":2595,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-10T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":51646},"rest":"https://alion.io/mcp/rest/get_company?id=51646"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fflo-health-security-architect"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":2,"usd":0.2},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fflo-health-security-architect"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fflo-health-security-architect"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/flo-health-security-architect\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fflo-health-security-architect"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3870694}},{"tool":"search_jobs","arguments":{"company":"flo.health","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3870694},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}