{"id":3302467,"url":"https://alion.io/job/imagine-pediatric-therapies-principal-security-engineer","title":"Principal Security Engineer","company":{"id":678432,"name":"Imagine Pediatric Therapies","domain":"imaginepediatrics.com","url":"https://alion.io/company/imaginepediatrics","size_band":"51-200","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":null},"role":"Security","role_family":"Security","seniority":"lead","employment_type":null,"work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"board_field","remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["United States"],"countries":["US"],"hiring_countries":["US"],"hiring_countries_total":1,"salary":{"min":195000,"max":null,"currency":"USD","period":"year","gross":null,"usd_annual":195000},"salary_estimate":null,"experience_years_min":10,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AI Agents","optional":false},{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"CI/CD","optional":false},{"name":"FHIR","optional":false},{"name":"GitHub","optional":false},{"name":"HIPAA","optional":false},{"name":"OWASP Top 10","optional":false},{"name":"Snowflake","optional":false},{"name":"Threat Modeling","optional":false},{"name":"Crowdstrike","optional":true},{"name":"SIEM","optional":true}],"status":"live","first_seen_at":"2026-10-26T20:36:51Z","employer_posted_date":"2026-10-26","last_verified_at":"2026-11-04T20:17:23Z","board_verified":true,"closed_at":null,"days_open":9,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":9},"description":"Who We Are\nImagine Pediatrics is a tech enabled, pediatrician led medical group reimagining care for children with special health care needs. We deliver 24/7 virtual first and in home medical, behavioral, and social care, working alongside families, providers, and health plans to break down barriers to quality care. We do not replace existing care teams; we enhance them, providing an extra layer of support with compassion, creativity, and an unwavering commitment to children with medical complexity.\nWhat You’ll Do \nAs Principal Security Engineer with Imagine Pediatrics, you will set the technical vision for how we protect our systems, our data, and the children and families who trust us with their care. You will serve as a trusted security advisor to the VP, Information Security and work across the business to make secure the default way we build and run technology, partnering closely with Engineering on DevSecOps strategy and architectural improvements.. You will stay hands-on with our hardest problems while raising the bar for the security team and the engineers around it. \nYou will: \nSet the technical vision for the security stack, including endpoint, email, data loss prevention, vulnerability management and penetration testing, network, application, and data security, and ensure it aligns with business and clinical strategy \nDefine long-term cloud and identity security strategy across Microsoft Azure/EntraID and Amazon Web Services (AWS), including privileged access, phishing-resistant MFA, and governance of non-human identities such as AI agents, service accounts, and API keys, shaping secure infrastructure design patterns that influence company-wide technical decisions \nLead security architecture review and threat modeling for Care Hub and connected services, including Medplum application-layer controls (FHIR access policies, SMART scopes, Bots, and custom code) and data platforms such as Snowflake \nDefine DevSecOps strategy and standardize security gates across the SDLC and CI/CD pipeline, building on GitHub Advanced Security, OWASP Top 10 practices, software bills of materials, and prioritization of CISA Known Exploited Vulnerabilities \nServe as the senior technical escalation point (including in the on-call rotation) for the most complex and highest-stakes security events and strengthen incident playbooks, ransomware and critical-SaaS exercises, and restoration testing against recovery targets \nMonitor and advise on the evolving threat landscape facing healthcare including AI-enabled and agentic attacks and its implications for business strategy \nEnsure the organization can accurately demonstrate its security posture to payors, regulators, auditors, and other third parties, building documentation and evidence pipelines, including AI-assisted ones, that scale with our HITRUST, HIPAA, and NIST compliance requirements. \nFrame ambiguous, high-stakes security questions for the organization and drive them to well-reasoned, defensible answers delivering decision-ready recommendations, risk rankings, and documented resolution pathways. \nEnsure precision at the program level by driving guardrails such as automated configuration checks and drift detection, so misconfigurations are prevented systemically rather than caught individually \nShape the technical sequencing of our multi-year security roadmap, contribute to quarterly engineering planning, and ensure the security program’s execution aligns with company strategy and the timelines that matter to the business \nExplore early-stage ideas and proofs of concept to de-risk future security initiatives before they are staffed or scoped \nChampion thoughtful AI adoption within security to reduce manual effort, and guide how AI tools and AI-enabled products are adopted securely across the company \nPartner with engineering, product, IT, and clinical stakeholders to embed security into how we design, build, and operate our digital products, translating complex security concepts for non-technical audiences \nMentor the security engineering team, coach engineers across technology on security craftsmanship, and shape the team’s learning culture \nAct as a trusted advisor to leadership, advocating for security engineers while aligning security decisions with business priorities, and demonstrate executive-level composure in high-stakes, ambiguous situations \nApply professional discretion and judgement when viewing sensitive and personal data or information in the process of conducting work \nOther duties as assigned \nWhat You Bring & How You Qualify \nFirst and foremost, you’re passionate and committed to reimagining pediatric health care and creating a world where every child with complex medical conditions gets the care and support they deserve. You will need: \nBachelor of Science degree in Computer Science, Information Security, Business, Management, or a related field is desired; advanced degree a plus \nRelevant license or certification(s): CISSP, CCSP, CISM, GIAC (e.g., GCIH, GCLD, GSEC), AWS Certified Security - Specialty, Microsoft Certified: Cybersecurity Architect Expert preferred \n10+ years of experience as a Security Engineer, Principal Security Engineer, Security Architect, or similar role(s), with at least 5 years of experience within the healthcare industry. \nA track record of setting security technical strategy and driving alignment across security, IT, and engineering teams \nDeep expertise in cloud and identity security architecture across AWS and Microsoft Azure/EntraID \nHands-on application and product security experience, including threat modeling, secure SDLC and CI/CD design, and securing healthcare APIs (FHIR, SMART on FHIR); experience with Medplum is a plus \nExperience leading detection and response programs, including partnering with MDR providers and leading the technical response to serious security incidents and data breaches \nExtensive experience translating HITRUST and HIPAA Security Rule requirements into technical controls and supporting engagements with auditors, payors, and regulators \nExperience using Artificial Intelligence (AI) as a transformative technology to enhance and automate security processes, and an understanding of the security risks AI systems introduce \nKnowledge of IT systems such as AWS, Microsoft Intune, EntraID, CrowdStrike Falcon (EDR/SIEM), GitHub Advanced Security, Snowflake, JAMF, Meraki, and JIRA Service Management \nStrong collaboration and coaching skills, with demonstrated success developing senior engineers \nComfort operating autonomously in ambiguity, exploring early-stage ideas without well-defined requirements \nExperience working in a fast-paced, hypergrowth, collaborative environment \nWillingness to participate in an on-call rotation \nContributions to the broader security community, such as conference talks, publications, or industry threat intelligence sharing, are a plus\nWhat We Offer (Benefits + Perks) \nThe role offers a base salary range of $195,000-$225,000 in addition to annual bonus incentive, competitive company benefits package, and eligibility to participate in an employee equity purchase program (as applicable). When determining compensation, we analyze and carefully consider several factors including job-related knowledge, skills and experience. These considerations may cause your compensation to vary. \nCompetitive medical, dental, and vision insurance \nHealthcare and Dependent Care FSA; Company-funded HSA \n401(k) with 4% match, vested 100% from day one \nEmployer-paid short and long-term disability \nLife insurance at 1x annual salary \n20 days PTO + 10 Company Holidays & 2 Floating Holidays \nPaid new parent leave \nAdditional benefits to be detailed in offer\nWhat We Live By\nWe’re guided by our five core values:\nOur Values:\nChildren First. We put the best interests of children above all. We know that the right decision is always the one that creates more safe days at home for the children we serve today and in the future.\nEarn Trust. We listen first, speak second. We build lasting relationships by creating shared understanding and consistently following through on our commitments.\nInnovate Today. We believe that small improvements lead to big impact. We stay curious by asking questions and leveraging new ideas to learn and scale.\nEmbrace Humanity. We lead with empathy and authenticity, presuming competence and good intentions. When we stumble, we use the opportunity to grow and understand how we can improve.\nOne Team, Diverse Perspectives. We actively seek a range of viewpoints to achieve better outcomes. Even when we see things differently, we stay aligned on our shared mission and support one another to move forward - together.\nWe Value Diversity, Equity, Inclusion and Belonging \nWe believe that creating a world where every child with complex medical conditions gets the care and support,they deserve requires a diverse team with diverse perspectives. We'reproud to be an equal opportunity employer. People seeking employment at Imagine Pediatrics are considered without regard to race, color, religion, sex, gender, gender identity, gender expression, sexual orientation, marital or veteran status, age, national origin, ancestry, citizenship, physical or mental disability, medical condition, genetic information, or characteristics (or those of a family member), pregnancy or other status protected by applicable law.","description_format":"text","description_chars":9395,"description_truncated":false,"requirements":{"experience_years_min":10,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["Equity","Life insurance","Vision insurance"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Physiotherapy & Rehabilitation","Pediatric Care"],"lifecycle":[{"event":"open","at":"2026-10-27T00:08:47Z"}],"visa":[{"country":"US","licensed_sponsor":true,"evidence":"H-1B filings in 12 months: 1","filings_12m":1,"filings_prev_12m":1,"green_card_filings_12m":0,"median_offered_wage_usd":162500,"route":null,"cap_exempt":false,"checked_at":"2026-10-29T16:27:21+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)"],"filings_for_role_12m":0}],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":8,"expected_fill_days":69,"reasons":["conf:0","win:early"],"computed_at":"2026-11-04T06:34:25Z"},"pay":{"stated_usd_annual":195000,"is_top_pay":false},"html_url":"https://alion.io/job/imagine-pediatric-therapies-principal-security-engineer","json_url":"https://alion.io/job/imagine-pediatric-therapies-principal-security-engineer.json","meta":{"generated_at":"2026-11-04T22:24:46Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":843,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-05T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":678432},"rest":"https://alion.io/mcp/rest/get_company?id=678432"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fimagine-pediatric-therapies-principal-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fimagine-pediatric-therapies-principal-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fimagine-pediatric-therapies-principal-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/imagine-pediatric-therapies-principal-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fimagine-pediatric-therapies-principal-security-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3302467}},{"tool":"search_jobs","arguments":{"company":"imaginepediatrics.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3302467},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}