{"id":19365,"url":"https://alion.io/job/stedi-security-engineer","title":"Security Engineer","company":{"id":5530,"name":"Stedi","domain":"stedi.com","url":"https://alion.io/company/stedi","size_band":"51-200","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Ashby","truth_index":{"grade":"A","score":93,"open_postings":11,"ghost_share":0,"stale_share":0.091,"repost_share":0,"time_to_fill_p50_days":162,"computed_at":"2026-10-16T05:45:00Z"}},"role":"Security","role_family":"Security","seniority":"middle","employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"board_field","remote_working_hours":null,"hiring_geo_confidence":"inferred","locations":[],"countries":[],"hiring_countries":["US","CA"],"hiring_countries_total":2,"salary":null,"salary_estimate":{"min_usd":85000,"max_usd":170000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":84},"experience_years_min":4,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AI Agents","optional":false},{"name":"Amazon Aurora","optional":false},{"name":"API Gateway","optional":false},{"name":"AWS","optional":false},{"name":"AWS Lambda","optional":false},{"name":"CI/CD","optional":false},{"name":"DynamoDB","optional":false},{"name":"GitHub","optional":false},{"name":"HIPAA","optional":false},{"name":"PagerDuty","optional":false},{"name":"Stripe","optional":false},{"name":"TypeScript","optional":false}],"status":"live","first_seen_at":"2026-02-18T23:33:36Z","employer_posted_date":"2026-02-18","last_verified_at":"2026-10-16T08:13:40Z","board_verified":true,"closed_at":null,"days_open":239,"trust":{"level":"ok","repost_count":1,"flags":[],"days_open":239},"description":"We're building a new healthcare clearinghouse\nStedi is the only headless clearinghouse and RCM engine. Headless means every part of our product is accessible via API. Developers and AI agents build their own interface on top of it. By offering modern, AI-ready APIs alongside traditional real-time and batch EDI processes, we enable both healthcare technology businesses and established players to exchange mission-critical transactions. Our clearinghouse product and customer-first approach have set us apart. Stedi was ranked by Ramp as one of the fastest-growing SaaS vendors.\nStedi has lightning in a bottle: engineers and designers shipping products week in and week out; a lean business team supporting the company's infrastructure; a passion for automation and eliminating toil; and $142 million in funding from top investors like Stripe, Addition, USV, Bloomberg Beta, First Round Capital, and more.\nTo see what we ship, watch the 2026 Stedi Keynote. To learn more about how we work, watch our founder Zack's interview with First Round Capital.\nWhat we’re looking for\nWe are seeking an experienced Security Engineer to join our Platform Team. This team is at the core of our infrastructure, responsible for managing multiple AWS Organizations and providing the foundational tools and services that enable our engineering teams to build reliable, secure, and compliant applications.\nThe Platform Team’s responsibilities span a wide range of areas, including:\nThe AWS infrastructure that our engineering teams rely on.\n\nManagement of our GitHub organization and IT operations.\n\nSupporting compliance efforts to ensure alignment with industry standards (SOC, HIPAA, HITRUST).\n\nAs a Security Engineer, you will play an active role in how we set up our AWS infrastructure, software development lifecycle, and endpoint security. Your contributions will help ensure our engineering teams build applications in a way where it is easy to demonstrate alignment with regulatory and compliance requirements.\nHow we build\nWe use AWS exclusively for our backend infrastructure that processes customer data. We use tools like GitHub, Stripe, Vanta, and PagerDuty, but all of our application work happens on AWS.\n\nWe use serverless technologies almost exclusively: Lambda, API Gateway, SQS, SNS, DynamoDB, Aurora Serverless, and more. We don’t run a single server on prem or in the cloud.\n\nWe use the CDK (TypeScript) to define infrastructure-as-code.\n\nWe have a strong preference for using AWS products over 3rd party solutions. This simplifies vendor management and compliance, and ensures we can benefit from AWS's integration capabilities and innovations now and in the future.\n\nWhat you'll do\nDevelop playbooks and address security-related tasks in our AWS serverless environments.\n\nDrive improvements in our broader security posture, including application security, endpoint security, access management / just-in-time access, email and web gateways, browser security, and data loss prevention.\n\nCollaborate with product engineering teams to raise the bar for security, supporting CI/CD pipelines, dependency management, and secure application design reviews.\n\nHelp secure and improve our AWS organization using infrastructure as code (CDK), enforcing security controls, and ensuring strong tenant isolation.\n\nContinuously assess vulnerabilities and perform regular risk assessments.\n\nWho you are\n4+ years of experience in engineering, working as a security engineer or in security-adjacent roles\n\nFamiliarity with compliance frameworks such as SOC, HIPAA, and/or HITRUST\n\n4+ years working with AWS services, including compliance and governance services like AWS Organizations, AWS CloudTrail, AWS Config, Security Hub, and GuardDuty.\n\nProficiency in TypeScript.\n\nAbility to prioritize your work based on the needs of the business and the customers\n\nHigh bandwidth; thoughtful attention to many areas simultaneously\n\nAbility to context switch throughout the course of the day or week as priorities shift\n\nPhilosophical alignment with theStedi Standards and theUnwritten laws of engineering.\n\nWe’ve been made aware of individuals impersonating the Stedi recruiting team. Please note:\nAll official communication about roles at Stedi will only come from an @stedi.comemail address, or from our official identification verification partner, Persona, @frompersona.com.\n\nIf you’re unsure whether a message is legitimate or have any concerns, feel free to contact us directly at  .\n\nWe appreciate your attention to this and your interest in joining Stedi.\nAt Stedi, we're looking for people who are deeply curious and aligned to our ways of working. You're encouraged to apply even if your experience doesn't perfectly match the job description.","description_format":"text","description_chars":4752,"description_truncated":false,"requirements":{"experience_years_min":4,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"},{"name":"Canada","iso":"CA","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Revenue Cycle & Medical Billing","Health Data & Interoperability"],"lifecycle":[{"event":"open","at":"2026-02-18T23:33:36Z"},{"event":"close","at":"2026-08-13T11:24:52Z"},{"event":"reopen","at":"2026-08-30T07:16:26Z"}],"visa":[{"country":"US","licensed_sponsor":true,"evidence":"H-1B filings in 12 months: 6","filings_12m":6,"filings_prev_12m":1,"green_card_filings_12m":0,"median_offered_wage_usd":157500,"route":null,"cap_exempt":false,"checked_at":"2026-10-15T11:24:14+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)"],"filings_for_role_12m":2}],"liveness":{"score":29,"band":"fade","label":"Fading","p_open":1,"p_active":0.661,"p_room":0.44,"age_days":239,"expected_fill_days":162,"reasons":["conf:2","win:tail","crowd:"],"computed_at":"2026-10-16T05:45:00Z"},"pay":null,"html_url":"https://alion.io/job/stedi-security-engineer","json_url":"https://alion.io/job/stedi-security-engineer.json","meta":{"generated_at":"2026-10-16T10:47:43Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":9380,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-17T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":5530},"rest":"https://alion.io/mcp/rest/get_company?id=5530"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fstedi-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fstedi-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fstedi-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/stedi-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fstedi-security-engineer"}]}