At Tandem, you’ll bring that mindset to help us build a secure, fast, and reliable foundation for AI-powered healthcare tools used across Europe. You’ll work hands-on across the stack: from application security and CI/CD pipelines to infrastructure hardening, penetration testing, and secure development practices. Your mission is simple but impactful: ensure Tandem can ship quickly and stay secure.

This is a role for someone who wants to be right in the middle of the action - designing secure architectures, breaking things safely, and helping developers stay productive without compromising safety. You will enable the business by proactively remove blockers. This is what makes us fast. You’ll collaborate closely with the Head of Security, engineering teams, and compliance to build security into everything we do.

What You’ll Do

• Work hands-on to secure Tandem’s infrastructure, applications, and internal systems.
• Build and maintain secure-by-default practices across the software development lifecycle (SDLC).
• Implement and operate static and dynamic code analysis, dependency scanning, and secure CI/CD tooling.
• Conduct or lead penetration testing, threat modelling, and vulnerability assessments.
• Support secure architecture design across engineering, including container orchestration, IAM, networking, and secrets management.
• Help ensure Tandem can deliver code quickly while maintaining a strong security posture.
• Work closely with developers, pairing, reviewing, and advising to help them ship secure, high-quality code efficiently.
• Participate in incident detection, response, and security reviews.
• Collaborate with the Head of Security on long-term strategy, audits, and certifications (ISO 27001, MDR, GDPR).

What You Bring

• Strong hands-on experience in security engineering, application security, or infrastructure security.
• Experience with penetration testing, exploitation techniques, or red-teaming (formal or self-taught).
• Familiarity with secure CI/CD, code analysis tools (SAST/DAST), dependency scanning, and vulnerability management.
• Strong understanding of authentication, identity, secrets management, and secure networking fundamentals.
• Ability to collaborate deeply with developers and make security a natural part of engineering workflow.
• Pragmatic mindset - you know how to balance security and speed in a fast-moving environment.
• Curiosity, creativity, and a genuine interest in how systems work (and how they can break).

Bonus Points

• Experience with container orchestration (Kubernetes, ECS, Nomad)
• Hands-on experience with cloud infrastructure security (AWS/GCP/Azure)
• Experience contributing to ISO 27001 or SOC 2 audits
• Background in software development (Python, Go, TypeScript)
• Experience in threat modelling or vulnerability research
• Worked in a regulated or compliance-heavy environment (healthcare, fintech, govtech)

Culture at Tandem

At Tandem, we move fast, think big, and take ownership. We're a high-performing, diverse team with a shared drive to change the future of healthcare - and we’re just getting started.

Our culture is built on action, ambition, and learning. You'll be trusted to take the lead, challenge yourself, and make an impact from day one. We believe real growth happens when you're stretched, supported, and surrounded by smart, passionate teammates who want to win together.

Even though we’re spread across countries, we come together often in Sweden for team meetings, social events, and offsites - blending global reach with real human connection.

We hire for talent, potential, and attitude - valuing different backgrounds and fresh perspectives. Great ideas come from everywhere, and we’re building a team that reflects the world we want to change.