Health can't wait Alan exists to end the wait. Health is a universal right, and we believe this right can only become real when it's coupled with prevention. We need to stop treating health as something we repair and start treating it as something we build, every day.
It's not solely a question of willpower. It's the healthcare system itself that needs to work for everyone, in a sustainable way. We are building the new standard in prevention insurance . Alan is the first company that integrates insurance, prevention, and care into a single, acclaimed user experience.
We are on an incredible journey to build a integral leading company, with a unique culture . If it speaks to you, we're hiring across France, Spain, Belgium, and Canada. We do security as we do everything else — not the traditional way, but aligned with our leadership principles.
The Stack
Python/Flask, TypeScript, React, React Native, on the coding side. AWS, GCP, Kubernetes, Keycloak, PostgreSQL, Redis, Terraform/Terramate, Datadog, Cloudflare, GitHub Actions on the platform side, all in a monorepo. We deploy daily and believe in distributed ownership — you build it, you own it.
The Application
Security crew - within Tech Foundations area Mission Tech Foundations enables product crews and creates the environment to thrive—combining world‐class infrastructure, intuitive developer experience, exquisite operational excellence, and built‐in security to make shipping exceptional products effortless.
Application
Security is one of its crews.
Its mission: build, evolve and operate the foundational security building blocks and secure‐by‐default patterns that make Alan's products safe by design, highly available, and easy to ship,
while partnering with product teams and Security Operations to reduce real risk without turning security into a bottleneck. Security core components in the product Our goal is to go passwordless with great UX and unblock strategic initiatives relying on this stack. Encryption – build, evolve and operate our end‐to‐end encryption component used by our Alan Clinic while keeping it delightful and frictionless for our members.
Security platforms Secure enclave for medical secrecy – contribute to the foundations to isolate and protect highly sensitive medical data without sacrificing usability or delivery speed. Contribute to engineering‐wide security practices by building tools and patterns that help every engineer ship safely (secure CI/CD, vulnerability remediation tooling, AI/LLM safety, etc.). We also have ambitious goals around our security stack and posture with enhanced tools and processes to protect our developers and users.
Experience we value 3+ years in full‐stack software engineering roles Mindset we value You treat security engineering as product work: engineers and members are your customers, and security should feel effortless. You're hands‐on: writing code is the bulk of the job (Python, TypeScript, Terraform). You ship what you write to production yourself, then operate it: rollouts, alerting, on‐call, incident response.
You make complex security tradeoffs legible to non‐security engineers. You're fluent in English (French is not required).
Remote work: We offer remote work flexibility, but we value in‐person collaboration. Everyone, no matter how underrepresented, should feel free to apply, as it can only bring learnings or success.
📌 Security-Focused Software Engineer - Auth & Encryption (Madrid)
🏢 Alan
📍 Madrid