Senior Security Engineer - Application Security

Role overview Strengthen application security across a healthcare technology environment, helping protect software, cloud services, infrastructure, and customer trust. As a senior individual contributor on a lean security team, you will work with engineering across the software lifecycle, combine hands-on testing with security automation, and help shape practices and policies across multiple product areas.

Responsibilities - Define and implement application security practices throughout design, development, testing, and deployment. - Partner with engineers to address security in system architecture and product design. - Test web applications, APIs, cloud-native services, and supporting infrastructure for vulnerabilities. - Improve CI/CD security checks, including code and dependency analysis, secrets detection, container scanning, and dynamic testing. - Tune security tools to produce useful findings while reducing unnecessary developer friction. - Review third-party software and integrations, contribute to incident response, and support compliance with healthcare and privacy requirements.

Requirements - At least four years of professional application, product, or software security experience, or software engineering experience followed by a move into security. - Strong knowledge of common application vulnerabilities, OWASP Top 10, and API security risks. - Experience manually testing modern web applications, APIs, and distributed systems, and reviewing code or architecture for weaknesses. - Experience integrating security tools into CI/CD workflows, including familiarity with static and dynamic testing, secrets detection, container security, and infrastructure-as-code scanning. - Understanding of authentication, authorization, session management, cryptography, secrets management, and secure API design. - Strong cloud and programming knowledge, awareness of AI-assisted coding risks, and experience rolling out organization-wide security policies.

Nice to have - Experience with security monitoring, identity, cloud security, or incident response tools. - Interest in evaluating and adopting emerging security technologies.

Benefits and work setup The stated annual compensation range is $150,000–$200,000. Benefits include health, dental, and vision coverage, stock options, paid parental leave, retirement savings, commuter benefits, 18 vacation days, nine company holidays, five sick days, and two personal days.