Cyber Security Engineer – Application Security

🔥 2 minutes ago

🔔 Pennsylvania – Remote

🔔 Pennsylvania – Remote

💵 $110k - $130k / year

⏰ Full Time

🟡 Mid-level

🟠 Senior

💻 Application Engineer

👻 Ghost score 0%

What it means: the chance that no one is really hiring for this job.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

TherapyNotes, LLC

WebsiteLinkedInAll Job Openings

51 - 200 employees

Founded 2010

💼 Consulting

⚖️ Legal

🏥 Healthcare

Consulting • Legal • Healthcare

TherapyNotes, LLC is a comprehensive practice management system designed specifically for behavioral health professionals, including psychologists, therapists, psychiatrists, and social workers. The platform offers an array of features such as scheduling, telehealth, electronic health records (EHR), billing, and a client portal, all integrated into a secure and user-friendly software solution. TherapyNotes aims to streamline clinical workflows, enhance patient care, and reduce administrative burdens for mental health practices, supporting them with dedicated customer service and continuous innovation based on user feedback.

📋 Description

• Integrate security continuously into the SDLC and CI/CD pipeline in collaboration with development teams • Enforce secure coding standards and best practices to protect customer data confidentiality, integrity, and availability • Perform security assessments, code reviews, and threat modeling • Own and operate GitHub Advanced Security, triaging code, secret, and dependency-scanning findings • Identify recurring vulnerability patterns and improve scanning coverage, configuration, and workflows • Secure GitHub Actions, including identities, runners, permissions, and secrets • Reduce software supply-chain risk through third-party action review, dependency controls, action pinning, and artifact provenance • Review Terraform and other infrastructure-as-code for security issues • Partner with IT platform teams on IaC scanning and secure deployment practices • Align application security measures with HIPAA, HITRUST, and HITECH and support regular audits • Collaborate with developers to remediate vulnerabilities and ensure patching or mitigation • Develop, deploy, and manage SAST, DAST, and vulnerability-management tools • Support application security incident response, root-cause analysis, and resolution strategies • Contribute to secure-coding awareness programs for development teams

🎯 Requirements

• Bachelor's degree in information security, computer science, or related field preferred; equivalent experience considered • 5+ years in application security or security engineering • Demonstrated experience securing CI/CD pipelines and GitHub Actions, including SAST/DAST, code/secret/dependency-scanning triage, runner and workflow-permission security, and third-party action/supply-chain risk • Experience reviewing Terraform or other infrastructure-as-code for security misconfigurations • Working knowledge of SIEM, EDR/XDR, and DLP platforms, including deployment, tuning, and alert triage • Understanding of Zero Trust architecture principles and application to application and identity access • Strong understanding of HIPAA, HITECH, and HITRUST and their impact on application security • Experience with API security, particularly integrations with other healthcare systems • Azure cloud security experience preferred; AWS a plus • Willingness to participate in an incident response on-call rotation • Industry certifications such as GWAPT, OSWE, GPEN, or Azure/AWS cloud security certification ideal; CISSP or HCISPP a plus • Familiarity with HL7 or other healthcare data standards preferred

🏖️ Benefits

• Employer sponsored health, dental, vision, life, and disability insurance • Retirement plan with company contribution • Annual company profit sharing • Personal development/training budget • Open, collaborative work environment • Extensive 2-week onboarding plan • Comprehensive mentorship program

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume