Senior Security Engineer - Application Security
K HealthTelemedicine company
New York, United States$150,000 - $200,000 USDSenior
Valor Equity Partners
Bessemer Venture Partners
Comcast Ventures
Claure Group
Mangrove Capital Partners
PICO Partners
Software Engineering
About the role
TL;DR
Senior Security Engineer focused on application security for K Health.
- •Join K's critical InfoSec team as a Senior Security Engineer
- •AppSec to protect infrastructure, applications, cloud security, and customer trust.
- •You will have the autonomy to define and implement cutting-edge security solutions across our entire technical ecosystem, ensuring our innovative work remains robust and compliant against evolving global threats.
- •Key Responsibilities Lead the development and implementation of robust application security protocols throughout the entire Software Development Lifecycle (SDLC).
- •Partner with engineering teams to incorporate security into architecture, design, development, testing and deployment.
- •Perform hands-on security testing of web applications, APIs, cloud-native services and supporting infrastructure.
- •Build and improve automated security testing within CI/CI pipelines.
- •Evaluate effectiveness of application security tools, improve tooling output quality and reduce unnecessary findings and developer friction.
- •Requirements 4+ years of professional experience in application, product or software security.
- •Strong understanding of application security vulnerabilities and attack techniques, including OWASP Top 10 and API security risks.
- •Experience performing manual security testing of modern web applications, APIs and distributed systems.
- •Ability to review application architecture and source code for security weaknesses.
- •Experience integrating application security tools into modern CI/CD workflows.
Required skills
OWASPPenetration TestingCI/CDGDPRHIPAAIAMSSOMFAGitLinuxREST API
Nice-to-have skills
VaultDatadogGoogle CloudPrisma
Domain expertise
healthtechcybersecurity
Tech stack
PythonJavaScriptTypeScriptJavaGoSQLBashReactNode.jsDjangoFlaskFastAPISpringExpressRuby on Rails.NETASP.NETNestJSLaravelSymfonyGinEchoActixPhoenixMicroservicesPostgreSQLMySQLMongoDBRedisElasticsearch
