
About Alma
Affordable mental health care for everyone
Key Highlights
- Raised $220.5M from top investors like Insight Partners and Cigna Ventures
- Over 20,000 therapists in a nationwide network
- Available in all 50 states, offering in-network care
- Named one of Incβs Best Workplaces in 2022, 2023, and 2024
Alma is a mental health care platform that simplifies access to affordable therapy by enabling over 20,000 therapists to accept insurance and provide in-network care across all 50 states. Founded in 2015, Alma has raised $220.5M from investors including Insight Partners and Cigna Ventures, and offer...
π Benefits
Alma provides competitive salaries, equity options, generous PTO, and a remote-friendly work environment. Employees also benefit from a learning budge...
π Culture
Alma fosters a mission-driven culture focused on improving mental health access. The company emphasizes collaboration and innovation, ensuring that em...

Security Engineer β’ Senior
Alma β’ United States - Remote
Skills & Technologies
Overview
Alma is hiring a Senior Application Security Engineer to help build secure tools for mental healthcare providers. You'll analyze and address security issues across the technical platform. This role requires a strong background in application security.
Job Description
Who you are
You have 5+ years of experience in application security, with a deep understanding of secure coding practices and security frameworks. You are familiar with OWASP guidelines and have hands-on experience using tools like Burp Suite to identify vulnerabilities in web applications. You thrive in collaborative environments and enjoy working closely with engineering teams to integrate security into the software development lifecycle.
You possess strong analytical skills, allowing you to assess risks and prioritize security issues effectively. Your communication skills enable you to articulate security concepts to both technical and non-technical stakeholders, ensuring that security is a shared responsibility across the organization. You are passionate about building secure applications that protect user data and enhance trust in digital services.
What you'll do
In this role, you will be responsible for validating that Alma's services and applications meet security standards. You will conduct security assessments and penetration testing to identify vulnerabilities, providing actionable recommendations to the engineering team. You will help define security best practices and ensure they are integrated into the development process, fostering a culture of security awareness within the organization.
You will collaborate with cross-functional teams to design and implement security controls, ensuring compliance with relevant regulations and standards. Additionally, you will stay updated on the latest security threats and trends, continuously improving Alma's security posture. Your contributions will directly impact the safety and security of mental healthcare providers and their clients.
What we offer
Alma offers a supportive and inclusive work environment where you can thrive. We provide competitive compensation and benefits, including flexible work arrangements to promote work-life balance. Join us in our mission to simplify access to mental health care while ensuring the highest standards of security for our users.
Interested in this role?
Apply now or save it for later. Get alerts for similar jobs at Alma.
Similar Jobs You Might Like
Based on your interests and this role

Security Engineer
Twilio is hiring a Senior Application Security Engineer to enhance their Application Security capabilities and improve secure engineering practices. You'll work with teams to reduce vulnerabilities and improve visibility in a remote role based in India.

Security Engineer
Hims & Hers is hiring a Senior Application Security Engineer to ensure the security of applications throughout the development lifecycle. You'll work with SAST, DAST, and SCA tools, and implement secure coding practices. This position requires experience in application security and modern security practices.

Security Engineer
1Password is hiring a Senior Security Engineer to join their Application Security team. You'll be responsible for ensuring the security of products and applications, utilizing skills in OWASP and Burp Suite. This position requires significant experience in application security.

Security Engineer
Pennylane is hiring a Senior Application Security Engineer to enhance the security of their financial operating system for SMEs. You'll work with OWASP and Burp Suite to ensure robust security measures. This position requires significant experience in application security.

Security Engineer
SoFi is hiring a Senior Application Security Engineer to conduct application security design reviews and perform comprehensive code reviews. You'll work with security best practices and collaborate with development teams to integrate security into the software development lifecycle.