Cyber Security Engineer – Application Security

🔥 0 minutes ago

🔔 Pennsylvania – Remote

🔔 Pennsylvania – Remote

💵 $110k - $150k / year

⏰ Full Time

🟡 Mid-level

🟠 Senior

💻 Application Engineer

👻 Ghost score 0%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

TherapyNotes, LLC

WebsiteLinkedInAll Job Openings

51 - 200 employees

Founded 2010

💼 Consulting

⚖️ Legal

🏥 Healthcare

Consulting • Legal • Healthcare

TherapyNotes, LLC is a comprehensive practice management system designed specifically for behavioral health professionals, including psychologists, therapists, psychiatrists, and social workers. The platform offers an array of features such as scheduling, telehealth, electronic health records (EHR), billing, and a client portal, all integrated into a secure and user-friendly software solution. TherapyNotes aims to streamline clinical workflows, enhance patient care, and reduce administrative burdens for mental health practices, supporting them with dedicated customer service and continuous innovation based on user feedback.

📋 Description

• Own application security across the SDLC and CI/CD pipeline • Collaborate with development teams to continuously integrate security into the SDLC and CI/CD pipeline • Enforce secure coding standards and best practices to protect customer data confidentiality, integrity, and availability • Perform security assessments, code reviews, and threat modeling • Own and operate GitHub Advanced Security, triaging code, secret, and dependency-scanning findings • Identify recurring vulnerability patterns and recommend broader fixes • Improve scanning coverage, configuration, and workflows • Secure CI/CD pipelines and GitHub Actions, including identities, runners, permissions, and secrets • Reduce software supply-chain risk through third-party action review, dependency controls, action pinning, and artifact provenance • Review Terraform and other infrastructure-as-code for security issues • Partner with IT platform teams on IaC scanning and secure deployment practices • Align application security measures with HIPAA, HITRUST, and HITECH and support regular audits • Collaborate with developers to remediate vulnerabilities and ensure effective patching or mitigation • Develop, deploy, and manage SAST, DAST, and vulnerability management tools • Support application security incident response, root-cause identification, and resolution strategies • Contribute to secure-coding awareness programs for development teams • Contribute to broader security engineering efforts including vulnerability management, incident response, and identity and access security

🎯 Requirements

• Bachelor's degree in information security, computer science, or related field preferred; equivalent experience considered • 5+ years in application security or security engineering • Demonstrated experience securing CI/CD pipelines and GitHub Actions, including SAST/DAST, code/secret/dependency-scanning triage, runner and workflow-permission security, and third-party action/supply-chain risk • Experience reviewing Terraform or other infrastructure-as-code for security misconfigurations • Working knowledge of SIEM, EDR/XDR, and DLP platforms, including deployment, tuning, and alert triage • Understanding of Zero Trust architecture principles and their application to application and identity access • Strong understanding of HIPAA, HITECH, and HITRUST and their impact on application security • Experience with API security, particularly integrations with other healthcare systems • Prior experience securing cloud environments; Azure preferred and AWS a plus • Willingness to participate in an incident response on-call rotation • Industry certifications such as GWAPT, OSWE, GPEN, or an Azure/AWS cloud security certification are ideal; CISSP or HCISPP a plus but not a substitute for hands-on tooling experience • Familiarity with HL7 or other healthcare data standards preferred

🏖️ Benefits

• Employer sponsored health, dental, vision, life, and disability insurance • Retirement plan with company contribution • Annual company profit sharing • Personal development/training budget • Open, collaborative work environment • Extensive 2-week onboarding plan • Comprehensive mentorship program