Senior Application Security Engineer

Job not on LinkedIn

🔥 0 minutes ago

🏈 Alabama, Arizona, +27 more states – Remote

🏈 Alabama – Remote 🌵 Arizona – Remote 🏄 California – Remote ⛰️ Colorado – Remote 🐊 Florida – Remote 🥔 Idaho – Remote 🌽 Illinois – Remote 🌪️ Kansas – Remote ⚜️ Louisiana – Remote 🦞 Maine – Remote 🗻 New Hampshire – Remote 🏖️ New Jersey – Remote 🗽 New York – Remote 🌲 North Carolina – Remote 🏈 Ohio – Remote 🌲 Oregon – Remote 🦀 Maryland – Remote 🍂 Massachusetts – Remote 🚗 Michigan – Remote ❄️ Minnesota – Remote 🏰 Missouri – Remote 🔔 Pennsylvania – Remote ⚓ Rhode Island – Remote 🌴 South Carolina – Remote 🎸 Tennessee – Remote 🤠 Texas – Remote 🍁 Vermont – Remote ⚔️ Virginia – Remote 🧀 Wisconsin – Remote

💵 $170k - $190k / year

⏰ Full Time

🟠 Senior

💻 Application Engineer

👻 Ghost score 0%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Connecting for Better Health

WebsiteLinkedInAll Job Openings

1 - 10 employees

Founded 2021

🏥 Healthcare

💼 Consulting

⚖️ Legal

Healthcare • Consulting • Legal

Connecting for Better Health is a nonprofit coalition dedicated to improving health and social service data sharing in California. The organization brings together providers, caregivers, health plans, advocates, and community organizations to collaborate on enhancing data sharing policies. Their initiative promotes the Data Exchange Framework (DxF), which aims to facilitate secure and efficient exchanges of health and social services information to support better whole-person care.

📋 Description

• Own application and product security through threat modeling, secure design review, and secure code review • Design and own security architecture for an agentic software development lifecycle, including phase gates, out-of-band controls, and clawback procedures • Build and operate non-human identity and secrets management across SaaS and AWS environments • Secure AWS through IAM, network segmentation, logging, encryption, and workload protection across S3, EKS, and Terraform • Enforce and tune GitHub Advanced Security, CodeQL, secret scanning, push protection, branch protection, and CODEOWNERS review • Review AI and third-party vendor integrations before they access PHI, evaluating data flows, retention, and data-loss prevention • Own vulnerability management and the penetration-testing relationship, driving findings to closure • Support HIPAA Security Rule technical safeguards and build detection, response, and security automation capabilities

🎯 Requirements

• Bachelor's degree in Computer Science or equivalent practical experience • 6+ years in security engineering, with depth in application/product security and AWS cloud security • Experience in healthcare, fintech, or another regulated, data-sensitive environment is a strong plus • Hands-on experience with SAST/DAST, GitHub Advanced Security/CodeQL, secret scanning, and software supply-chain/dependency security • Strong identity and access management experience, including Okta, OAuth/OIDC, SAML, phishing-resistant MFA, and non-human identity and secrets management • Familiarity with or drive to learn AI/LLM and agentic systems security, including prompt injection, agent authorization and over-permissioning, NHI sprawl, and model/supply-chain risk • Ability to work as the sole security specialist on a small, cross-functional team and explain tradeoffs to technical and non-technical stakeholders • Working knowledge of the HIPAA Security Rule, SOC 2, and NIST Cybersecurity Framework • Proficiency with Python and at least one shell • Preferred: OSCP, GIAC, AWS Certified Security–Specialty, CISSP, or Okta Certified Professional • Preferred: experience operating a compliance-automation platform

🏖️ Benefits

• Salary range of $170,000–$190,000 plus bonus and meaningful equity • 90% of employee premiums paid for medical, dental, and vision coverage • Flexible PTO • 11 holidays and 1 floating holiday • Eligibility to contribute to a 401(k) • Remote-first flexibility • Work from home anywhere within approved states in the US