Align Technology
Engineer, Product Security
Full details on LinkedIn
The complete job description, requirements, and application details are available on the original posting.
About Align Technology
Align Technology is a global medical device company founded in 1997, headquartered in San Jose, California. The company specializes in designing and manufacturing invisible orthodontic solutions and digital dental scanning technology. Its flagship product, the Invisalign system, features custom-made clear aligners that straighten teeth using advanced 3D imaging and computer-aided design technology. The Invisalign system includes options tailored for different age groups and treatment complexities. In addition to the Invisalign system, Align Technology produces iTero intraoral scanners, which enhance orthodontic workflows and patient experiences. The company has established a strong market presence, having trained over ten thousand doctors and expanded its operations internationally. Align Technology has also pursued growth through strategic acquisitions and partnerships, further solidifying its position in the orthodontics market.
Security at Align Technology
Compiled from public job postings, careers pages, and company materials. Data may not reflect current state — verify during interviews.
Security Philosophy
- Stated mission / remit: "This role is critical in strengthening product security posture...enabling secure innovation" – Align Careers (jobs.aligntech.com) .
- Coordinated program: "operates a global product security program" – Align CVD (aligntech.com/cvd) .
- Developer enablement: "Enable development teams to build secure products by design" – Align Careers .
- Risk approach: "risk assessments, threat modeling" and security testing (SAST/DAST/SCA) – Align Careers .
- "conduct a risk analysis to determine the vulnerability's potential scope" – Align CVD .
- Stated operational goals/pain points (employee-reported): "researching, selecting and developing our internal Secrets Detection process".
- "launch our first AppSec-lead penetration test".
- "building the first ever internal Capture The Flag program".
- "programmatically building and sending tickets to ServiceNow" – LinkedIn (zachary-leach) .
Security Team
Org & reporting: "join the Technology Governance & Compliance team" – Align Careers (jobs.aligntech.com) (Evidence: E-101). Leadership: Joe Friend — "Vice President and Chief Information Security Officer. Align Technology." – LinkedIn (joe-friend) . Public-facing AppSec staff: Zachary Leach — "Associate Application Security Engineer at Align Technology" – LinkedIn (zachary-leach) . Team size: Information not publicly available. Active AppSec job postings (as_of): Count: 1 (Engineer, Product Security) – Align Careers . Common skills listed: "SAST, DAST, SCA, penetration testing" and "Secrets Detection" (E-101; E-103).
Key Initiatives
- Security Champions Program: No Evidence Found (no public mention) (E-101.
- Shift-Left / developer enablement: "Enable development teams to build secure products by design" and security testing in SDLC (SAST, DAST, SCA) – Align Careers .
- Vulnerability intake & triage: intake via "product security webform" and Align will "verify the reported vulnerability" and "notify the appropriate product teams to conduct a risk analysis" – Align CVD .
- Careers posting mentions "monitor and assess product security vulnerability management processes" .
- Automation & remediation tracking: "programmatically building and sending tickets to ServiceNow" – LinkedIn .
- Secure SDLC artifacts / standards: mentions of threat modeling, risk assessments, and alignment with ISO/NIST/OWASP – Align Careers .
- Recent initiatives (last 6–18 months in public record): internal Capture The Flag program, secrets-detection process, first AppSec-led penetration test, and automation to escalate overdue vulnerabilities .
Preparing for an AppSec interview?
Get the weekly briefing 2,000+ security pros trust.