Senior Security Engineer – Application Security

🔥 17 hours ago

🇺🇸 United States – Remote

💵 $150k - $200k / year

⏰ Full Time

🟠 Senior

💻 Application Engineer

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

👻 Ghost score 0%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

K Health

WebsiteLinkedInAll Job Openings

201 - 500 employees

Founded 2016

💼 Consulting

⚖️ Legal

⚕️ Healthcare Insurance

Consulting • Legal • Healthcare Insurance

K Health is a healthcare technology company that offers 24/7 access to personalized care by pairing clinicians with advanced AI. The platform allows users to receive primary, urgent, and mental health care remotely through a mobile app. By partnering with top health systems and insurance providers across the U. S. , K Health strives to provide high-quality medical services without the need for insurance in many cases. Their expertise spans chronic condition management, urgent care, and mental health services, enabling comprehensive health support for users.

📋 Description

• Lead the development and implementation of robust application security protocols throughout the entire Software Development Lifecycle (SDLC) • Partner with engineering teams to incorporate security into architecture, design, development, testing and deployment • Perform hands-on security testing of web applications, APIs, cloud-native services and supporting infrastructure • Build and improve automated security testing within CI/CD pipelines, including static analysis, dependency scanning, secrets detection, container scanning and dynamic testing • Evaluate application security tools, improve tooling output quality and reduce unnecessary findings and developer friction • Develop secure coding standards with developer-focused documentation • Contribute application security expertise to vulnerability management, security incidents/investigations and post-incident reviews • Evaluate third party applications, libraries, APIs and integrations for security risk • Ensure adherence to relevant healthcare regulatory and compliance requirements, including HIPAA and GDPR, across all product lines and systems • Explore, partner on and implement bleeding-edge technology

🎯 Requirements

• 4+ years of professional experience in application, product or software security, operating as an individual contributor, OR as a software engineer that has pivoted into security • Strong understanding of application security vulnerabilities and attack techniques, including OWASP Top 10 and API security risks • Experience performing manual security testing of modern web applications, APIs and distributed systems • Ability to review application architecture and source code for security weaknesses • Experience integrating application security tools into modern CI/CD workflows • Familiarity with static application security testing, dynamic testing, secrets detection, container security and infrastructure-as-code scanning • Understanding of authentication, authorization, session management, cryptography, secrets management and secure API design • Strong expertise in cloud technology (AWS, GCP, or Azure), modern programming languages, utilization of generative coding utilities, and the security implications of utilizing AI code development utilities • Demonstrated experience researching, establishing, and successfully rolling out enterprise-wide security policies and guidelines • Experience with specific tools and tech K uses, including Datadog, Sumologic, Torq, flare.io, GCP, Entitle, Okta, Orca, GitLab, and Prisma is a bonus

🏖️ Benefits

• Monthly social committees for company events • 18 vacation days, 9 company holidays, 5 sick days, and 2 personal days • Stock options for every full-time employee • Paid parental leave • 401k benefit • Commuter Benefits • Competitive health, dental, and vision insurance options