Athena Health

Lead security engineering efforts focusing on application security, SDLC adoption, and API security program leadership. | Requires 3+ years software development and 3-5 years security-focused development experience with strong knowledge of security protocols and cloud technologies. | athenahealth is seeking a Lead Security Engineer to help increase the security capabilities of its teams. This role works closely with scrum teams, product managers, and engineering leadership to improve the quality and adoption of Security Development Lifecycle practices, with a strong emphasis on API security. This position owns the technical direction, implementation, and operation of security capabilities and is suited for someone who enjoys setting technical strategy, influencing stakeholders, and defining measurable security outcomes. About the Team This team solves application security problems at scale and partners across engineering and security functions to help protect athenahealth's products and platforms. The work combines security engineering, software development, and cross-functional communication to support secure product delivery in a healthcare environment. Core Responsibilities Security strategy and SDLC adoption Socialize and drive execution of key security best practices across the R&D organization. Contribute to the enterprise security catalog of best practices, techniques, and patterns. Improve the quality and adoption of Security Development Lifecycle practices. Application security capability ownership Own the evaluation, design, implementation, integration, reliability, and continuous improvement of application security capabilities. Support SAST, SCA, DAST, API security testing, and vulnerability management workflows. Document, share, and help automate coverage for common abuse cases and attacks. API security program leadership Lead the API security testing program. Manage API discovery, authenticated and unauthenticated testing, scanner attribution, onboarding, exclusions, ownership mapping, findings routing, and operational readiness. Identify and explain feature-level design or architectural weaknesses that could create security issues. Cross-functional partnership and issue management Partner with enterprise security leadership to track and prioritize open issues and follow through on resolution. Work with DevOps, Infrastructure, IAM, API Gateway, NOC, Enterprise Security, and application teams to design and operate security-hardened platforms. Required Experience & Skills Bachelor's degree in Computer Science, Computer Engineering, Cyber Security, or similar, or equivalent experience. At least 3 years of experience as a software developer and 3-5 years in a security-focused development role in an agile environment. Experience in software and product design and architecture, product security, and security issue prevention and mitigation. Strong software engineering background with the ability to develop, review, and troubleshoot code in one or more languages. Practical experience with Docker and Terraform. Strong knowledge of OAuth 2.0, OpenID Connect, JWT, SAML, and service-to-service authentication. Solid understanding of RESTful services, service bus architectures, JSON, and related web services concepts. Experience with SAST, SCA, DAST, API security testing, vulnerability aggregation, and CI/CD security controls. Hands-on experience with cloud platforms, containers, infrastructure as code, secrets management, and CI/CD. Knowledge of HIPAA, HITRUST, and PCI-DSS is a plus. Why This Role Matters This role is central to strengthening secure software delivery across athenahealth. It combines technical depth, security leadership, and cross-functional influence to improve how security is built into products from the start. Expected Compensation $143,000 - $243,000 The base salary range shown reflects the full range for this role from minimum to maximum. At athenahealth, base pay depends on multiple factors, including job-related experience, relevant knowledge and skills, how your qualifications compare to others in similar roles, and geographical market rates. Base pay is only one part of our competitive Total Rewards package - depending on role eligibility, we offer both short and long-term incentives by way of an annual discretionary bonus plan, variable compensation plan, and equity plans.

Manage leave and accommodation cases ensuring compliance and employee support. | 3-5 years leave administration experience with knowledge of leave laws and HR systems. | Position Summary The Senior Leave Associate manages leave of absence and workplace accommodation cases from intake through return to work. This role supports employees, managers, and internal partners by explaining requirements, coordinating documentation, and keeping cases moving accurately and on time. The position helps ensure compliance with applicable laws and company policies while delivering a consistent employee experience. This role reports to the Director, Global Benefits. Essential Job Responsibilities • End-to-End Leave Case Management: Manage the full lifecycle of leave of absence and accommodation cases from intake through return to work, ensuring timely handling, accurate tracking, and coordination with key partners. • Decision-Making & Compliance: Partner with the third-party leave vendor to review requests and apply company policy and legal requirements to support compliant decisions. • Employee & Manager Support: Serve as the main point of contact for employees and managers by providing clear guidance, regular updates, and return-to-work support throughout the leave process. • Subject Matter Expertise & Escalation Handling: Act as a subject matter expert on leave and accommodation programs, handling complex cases and consulting with Legal or HR leadership when needed. • Process Improvement & Reporting: Identify process improvements, maintain and analyze leave data, and share reports and recommendations to support better decisions and ongoing program enhancements. • Risk Management & Integrity: Review suspected leave misuse or fraud, document findings, and escalate concerns to support the integrity of leave programs. • Cross-Functional Collaboration: Partner with Payroll, Legal, HR, HR Operations, and AskHR to support leave-related work, update guidance, and provide accurate answers to employee and manager questions. • Vendor Management: Monitor third-party administrator performance, resolve case issues, track trends, and escalate concerns to help ensure accurate and timely service. • Continuous Learning: Stay current on leave laws, best practices, and industry trends through ongoing learning and professional development. • AI usage: Use AI tools responsibly to summarize case information, organize documentation, and identify workflow patterns while protecting confidential employee data and applying human judgment to all decisions. Expected Education & Experience • Bachelor’s degree in Human Resources, Business Administration, or a related field preferred, or equivalent work experience. • 3-5years of progressive experience in leave administration, benefits, or a related HR area, with extensive experience managing FMLA and ADA/ADAAA cases independently. • Knowledge of federal, state, and local leave laws and regulations. • Experience interpreting documentation and applying policies to determine next steps in case handling. • Experience using HR systems, case management systems, or workflow tools such as Workday, ADP, or similar platforms. • Ability to analyze data, identify trends, and prepare clear reports or summaries. • Strong written and verbal communication skills with the ability to explain complex information clearly. • Strong organization and time management skills with the ability to manage multiple cases and deadlines. • Ability to work independently, collaborate across teams, and maintain confidentiality and sound judgment. Work Environment & Physical Requirements: This role is primarily desk-based and may be performed in a remote or office environment. It requires prolonged periods of computer use and regular communication via phone/email. The employee should be able tomaintainadedicated, safe workspace (with reliable internet access) and engage in standard office activities. Minimal physical effort is needed beyond normal office tasks (such as moving light files or using office equipment).Reasonable accommodations can be provided to enable individuals with disabilities to perform the essential functions. Note: The above statements describe the general nature and level of work being performed. They are not intended to be an exhaustive list of all responsibilities and qualifications requiredofthe job. Expected Compensation $79,000 - $135,000The base salary range shown reflects the full range for this role from minimum to maximum. At athenahealth, base pay depends on multiple factors, including job-related experience, relevantknowledge and skills, how your qualifications compare to others in similar roles,and geographical market rates. Base pay is only one part of our competitive Total Rewards package - depending on role eligibility, we offer both short and long-term incentives by way of an annual discretionary bonus plan, variable compensation plan, and equity plans.