Application Security Engineer, Alan
Tech Foundations
Digital healthcare insurance
Job no longer available
Digital healthcare insurance
1001+ employees
Job no longer available
1001+ employees
Company mission
To make the healthcare system frictionless, fair and friendly for everyone.
Role
Who you are
- 3+ years in application security, DevSecOps, or security engineering roles
- Experience building or operating security tooling (SAST, DAST, dependency scanners, secrets detection)
- Ability to script and automate (Python, Bash, or equivalent) - code is your common language with Engineering
- You love turning security findings into systemic fixes, not just one-off patches
- You treat security as an enabler: your role is to enable developers, your customers, by making the secure route the most straightforward one
- You're pragmatic: you prioritize findings by real risk, looking at impact on our members and our business; you drive fixes to closure, you don’t stop at the ticket queue
- You're hands-on: you write scripts, integrate tooling, and get things done
- You build systems: guardrails, policies, and automation that scale beyond your own effort
- You're fluent in English (French is a bonus)
- For this opportunity, we are aiming to hire within the C1 - E level range
- But above all, we are looking for high potential and curiosity: make sure to show us this when you apply! Everything else is a bonus
What the job involves
- In our engineering team, we build the infrastructure, interfaces, and applications to provide first-class service to our members, health professionals, and even ourselves!
- Being an engineer at Alan means joining a team of talented, committed and passionate engineers, with a lot of product interaction
- We move fast, with a lot of ownership, and are proud to tackle big problems!
- We do security as we do everything else — that is, not quite the traditional way, but always in line with our leadership principles
- Joining Alan as a Application Security Engineer team means you're at the forefront of protecting sensitive health data and ensuring our systems are resilient against threats
- Tech Foundations enables product crews and creates the environment to thrive - combining world-class infrastructure, intuitive developer experience, exquisite operational excellence, and built-in security to make shipping exceptional products effortless
- Application Security is one of its crews. Its mission: build, evolve and operate the foundational security building blocks and secure-by-default patterns that make Alan's products safe by design, highly available, and easy to ship, while partnering with product teams and Security Operations to reduce real risk without turning security into a bottleneck
- SAST - Implement, maintain, and continuously improve static analysis tooling integrated into CI/CD pipelines
- DAST - Deploy and operate dynamic analysis tooling to surface runtime vulnerabilities before they reach production
- Hardcoded secrets - Detect, remediate, and prevent hardcoded secrets across the codebase and pipelines
- Vulnerability remediation - Identify, triage, and drive remediation of vulnerabilities in application code and CI/CD configurations
- Dependency vulnerability management - Identify, triage, and drive remediation of vulnerabilities in third-party dependencies
- Dependency & runtime hygiene - Keep dependencies and execution environments up to date, with clear ownership and SLAs
- Production traceability & hardening - Harden execution environments and ensure full traceability of code deployed to production
- Security and privacy by design - Champion security and privacy as first-class concerns in engineering workflows, code reviews, and architecture decisions
- Threat modeling & risk culture - Foster a habit of threat modeling and rapid risk assessments in product teams; elevate security maturity across the entire product and engineering community
- Secure SDLC - Embed security checkpoints and guardrails throughout the software development lifecycle
- AI-assisted coding security - Define and enforce security guardrails for AI-assisted and agentic coding workflows, for both Engineering and non-Engineering populations
- In 2026, we will significantly raise the security bar across our engineering practices. We will build and deploy a comprehensive security scanning suite in our CI/CD pipelines, establish systematic dependency vulnerability management, and run our first fully internalized pentest cycle
- We are also at a critical inflection point with AI-assisted development: as vibe coding and agentic workflows become the norm across Engineering and beyond, we need dedicated effort to define the guardrails that keep us secure without slowing us down. At Alan, everyone can build - and as that becomes a reality, security must scale with it
Our take
Alan addresses health insurance for businesses and employees in Europe through a healthcare app, backed by official regulatory approval. This endorsement grants Alan the ability to offer a wide range of regulated healthcare insurance services, distinguishing itself in the market.
Focused on user experience and customer satisfaction, Alan employs a people-centric approach, streamlining insurance claims and designing user-friendly health insurance products. While competitors like Babylon and Ada Health exist, Alan's primary focus on health insurance sets it apart.
Despite macroeconomic challenges prompting a goal realignment, Alan achieved significant revenue growth in 2023 and reached a valuation of $4.5 billion in late 2024. This was driven by impressive funding rounds and an expansion of its client base, leveraging AI tools for enhanced productivity. With a robust cash revenue, Alan plans to sustain growth, consolidate its position in the existing markets, and explore expansion into new territories, positioning itself for a potential future IPO.
Freddie
Company Specialist at Welcome to the Jungle
Insights
13% employee growth in 12 months
Company
Funding (last 2 of 8 rounds)
Mar 2026
$116.8m
LATE VC
Sep 2024
$202.1m
SERIES F
Total funding: $893.7m
Company benefits
- Fair rewards: Generous equity packages complement your base salary, for permanent contracts only
- Flexible Office: Amazing office space at our HQ, sponsored co-working hubs or a full-remote experience with home office equipment sponsorship, we want you to live where you’re the happiest
- All the tools you need: Top-of-the-range equipment: Macbook Pro, keyboard, laptop stand, monitor, and Bose noise-cancelling headphones
- Flexible vacation policy and flexible working hours: Organise your time as you wish
- Delightful healthcare insurance: Extremely comprehensive health insurance - 100% of the contribution covered by Alan for you and your family, for permanent contracts only
- Transport: Country-specific commuter benefits
- Learning & Training opportunities: A highly flexible Training policy free books and a budget to attend and speak at conferences if the opportunity arises
- Parental leave: Extended parental leave for all new parents, for permanent contracts only
Company HQ
Plaine-Monceau, Paris, France
Leadership
Charles Gorintin
(Co-Founder & CTO)Co-founding Advisor at Mistral AI. Previously a Data Scientist at Facebook, Instagram, and Twitter.
Jean-Charles Samuelian-Werve
(Co-Founder & CEO)Co-founding Advisor and Board Member at Mistral AI. Previously co-founded Expliseat.
Share this job
View 46 more jobs at Alan