Software Engineer (Security) - Tech Foundations

HEALTH CAN’T WAIT. Not for symptoms to get worse. Not for a six‑month appointment. Not for a system to catch up. But that’s exactly how healthcare works today. You wait, until you can’t. Alan exists to end the wait. Health is a universal right, and we believe this right can only become real when it’s coupled with prevention. We need to stop treating health as something we repair and start treating it as something we build, every day. It’s not solely a question of willpower. It’s the healthcare system itself that needs to work for everyone, in a sustainable way. So we are building the new standard in prevention insurance. Alan is the first company that integrates insurance, prevention, and care into a single, acclaimed user experience. We are on an incredible journey to build a global leading company, with a unique culture https://alan.com/en/careers. We already partner with 40K+ companies of all sizes, serving more than 1M+ members, and have reached €800M+ in ARR. Prevention as the new norm. That's what we're building with our team of 800+ people. If it speaks to you: we're hiring across France, Spain, Belgium, and Canada. And beyond. ⭐ THE ENGINEERING TEAM ⭐ In our engineering team, we build the infrastructure, interfaces, and applications to provide first-class service to our members, health professionals, and even ourselves! Being an engineer at Alan means joining a team of talented, committed and passionate engineers, with a lot of product interaction. We move fast, with a lot of ownership, and are proud to tackle big problems! We do security as we do everything else — that is, not quite the traditional way, but always in line with our leadership principles. Want to know more? Read this article https://medium.com/alan/a-new-iteration-of-our-engineering-career-path-at-alan-f46f7b229b2d on our Engineering career path. 🛠️ THE STACK Python/Flask, Typescript, React, React Native, on the coding side. AWS, GCP, Kubernetes, Keycloak, PostgreSQL, Redis, Terraform/Terramate, Datadog, Cloudflare, GitHub Actions on the platform side, all in a monorepo. We deploy daily and believe in distributed ownership - you build it, you own it. 🤖 THE APPLICATION SECURITY CREW - WITHIN TECH FOUNDATIONS AREA 🎯 MISSION - Tech Foundations - enables product crews and creates the environment to thrive—combining world-class infrastructure, intuitive developer experience, exquisite operational excellence, and built-in security to make shipping exceptional products effortless. - Application Security - is one of its crews. Its mission: build, evolve and operate the foundational security building blocks and secure-by-default patterns that make Alan’s products safe by design, highly available, and easy to ship, while partnering with product teams and Security Operations to reduce real risk without turning security into a bottleneck. 🔭 SCOPE 1. Security core components in the product 1. Authentication - design, build and operate the authentication stack on top of our self-hosted identity provider. Our goal is to go passwordless with great UX and unblock strategic initiatives relying on this stack. 2. Encryption - build, evolve and operate our end-to-end encryption component used by our Alan Clinic while keeping it delightful and frictionless for our members. 2. Security platforms 1. Secure file exchange - evolve and operate our secure file exchange platform to unblock product/ops teams while bringing support when relevant. 2. Secure enclave for medical secrecy - contribute to the foundations to isolate and protect highly sensitive medical data without sacrificing usability or delivery speed. 3. Contribute to engineering-wide security practices by building tools and patterns that help every engineer ship safely (secure CI/CD, vulnerability remediation tooling, AI/LLM safety, etc.). 👀 FOCUS FOR 2026: In 2026, we will grow the team significantly to further increase our impact. We want to complete the modernization of our authentication flows and make it ope...