RemoteLeaf Logo
Log in Sign up

Cyber Security Engineer (Application Security)

16 hours, 57 minutes ago
United States
Full-time
Senior
Application Security Engineer
DevOps and Infrastructure
AWS Azure CI/CD Cybersecurity GitHub Actions HIPAA SIEM Terraform
Apply Now
TherapyNotes

TherapyNotes

TherapyNotes is a comprehensive practice management software designed for behavioral health practitioners. It offers a range of features including secure record management, appointment scheduling, note writing, and billing services. Developed by a husb...

Health Care Providers & Services
51-250
Founded 2010
View All Jobs 2

Description

  • Integrate security into the SDLC and CI/CD pipelines in collaboration with development teams.
  • Enforce secure coding standards and conduct application security assessments, code reviews, and threat modeling.
  • Own GitHub Advanced Security, including triage of code, secret, and dependency-scanning findings.
  • Secure GitHub Actions, runners, identities, permissions, secrets, dependencies, and software supply chains.
  • Review Terraform and other infrastructure-as-code for security misconfigurations and improve IaC scanning practices.
  • Develop and manage SAST, DAST, vulnerability management, and other automated security tools.
  • Guide developers in vulnerability remediation, patching, and mitigation activities.
  • Ensure application security practices align with HIPAA, HITRUST, and HITECH requirements and support audits.
  • Support security incident response, root-cause analysis, vulnerability management, and on-call coverage.
  • Contribute to secure-coding awareness and broader security engineering initiatives.

Requirements

  • 5+ years of experience in application security or security engineering.
  • Bachelor’s degree in information security, computer science, or a related field preferred; equivalent experience accepted.
  • Hands-on experience securing CI/CD pipelines and GitHub Actions, including SAST, DAST, code, secret, and dependency scanning.
  • Experience with GitHub Advanced Security, Snyk, runner and workflow-permission security, and third-party action supply-chain risk.
  • Experience reviewing Terraform or other infrastructure-as-code for security issues.
  • Working knowledge of SIEM, EDR/XDR, and DLP platforms, including deployment, tuning, and alert triage.
  • Understanding of Zero Trust architecture and application and identity access security.
  • Strong knowledge of HIPAA, HITECH, and HITRUST requirements.
  • Experience with API security and healthcare-system integrations; HL7 or similar standards preferred.
  • Experience securing cloud environments, preferably Azure; AWS experience is a plus.
  • Willingness to participate in an incident-response on-call rotation.
  • Security certifications such as GWAPT, OSWE, GPEN, Azure/AWS security certifications, CISSP, or HCISPP are preferred.

Benefits

  • Competitive salary of $110,000–$150,000.
  • Employer-sponsored health, dental, vision, life, and disability insurance.
  • Retirement plan with company contribution.
  • Annual company profit sharing.
  • Personal development and training budget.
  • Two-week onboarding program.
  • Comprehensive mentorship program.
  • Open, collaborative work environment.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

AHEAD

Principal Technical Consultant – Cloud and Application Security

AHEAD 1K-5K IT Services

AHEAD is seeking a Principal Technical Consultant to lead client security engagements and support business development and practice growth across cloud security, application security, threat management, and DevSecOps.

United States Full-time Lead Application Security Engineer
$250k-$300k
AWS Azure Bash DevSecOps Docker GCP GraphQL Kubernetes PowerShell Python REST API Sentinel Serverless SIEM Splunk Terraform Vertex AI
1 day, 16 hours ago
vivenu

Senior Security Engineer - AppSec (d/f/m)

vivenu 51-250 Media

vivenu is hiring a Senior Security Engineer focused on AppSec to build and scale a security program for its API-first live entertainment ticketing platform and global cloud infrastructure.

Germany Full-time Senior Application Security Engineer
Argo CD AWS Azure CI/CD GCP GitHub Actions GitOps Go Kubernetes Penetration Testing Terraform TypeScript
1 day, 16 hours ago
Aledade

Senior Security Engineer II - Application Security

Aledade 1K-5K Health Care Providers & Services

Aledade PBC is hiring a Senior Security Engineer II to design, automate, and operate security services that protect its healthcare technology environment while partnering across teams to improve the organization’s security posture.

United States Full-time Senior Application Security Engineer
AWS Azure C# C++ DevSecOps GCP Go Java JavaScript Machine Learning Python R Scala Terraform
3 days, 16 hours ago
MyFitnessPal

Application Security Engineer

MyFitnessPal 10K-50K Health Care Providers & Services

MyFitnessPal is hiring a Security Engineer II to protect the code, applications, and development processes behind its mobile and backend health platform by operating application security programs and building security automation.

United States Full-time Junior Application Security Engineer
$90k-$130k
CI/CD GitHub Actions Kubernetes Penetration Testing Python
3 days, 16 hours ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers