Назад
Company hidden
3 дня назад

Senior Security Engineer - Application Security (AI)

150 000 - 200 000$
Формат работы
remote (только USA)
Тип работы
fulltime
Грейд
senior
Английский
b2
Страна
US
Вакансия из списка Hirify.GlobalВакансия из Hirify Global, списка международных tech-компаний
Для мэтча и отклика нужен Plus

Мэтч & Сопровод

Для мэтча с этой вакансией нужен Plus

Описание вакансии

Текст:
/
TL;DR
Senior Security Engineer - Application Security (AI) (Application Security/Healthcare AI): Building and operating application security capabilities across the SDLC, cloud infrastructure, APIs, and healthcare technology systems with an accent on manual testing, secure architecture, and automated security controls. Focus on integrating SAST, DAST, dependency, secrets, container, and infrastructure-as-code scanning into CI/CD, reducing developer friction, and addressing HIPAA and GDPR requirements.

Location: Remote

Salary: $150,000–$200,000 USD per year

Company

hirify.global develops an AI-powered virtual care engine, clinical AI products, provider-serving solutions, and AI-powered virtual clinics for healthcare systems.

What you will do

  • Lead application security practices across the full software development lifecycle.
  • Partner with engineering teams on secure architecture, design, development, testing, and deployment.
  • Perform hands-on security testing of web applications, APIs, cloud-native services, and supporting infrastructure.
  • Build and improve CI/CD security automation, including static analysis, dependency, secrets, container, and dynamic testing.
  • Improve security tooling quality, secure coding standards, and developer-focused documentation.
  • Support vulnerability management, incident investigations, third-party risk reviews, and healthcare compliance efforts.

Requirements

  • 4+ years of professional experience in application, product, or software security, or software engineering experience transitioned into security.
  • Strong knowledge of application vulnerabilities, OWASP Top 10, API security risks, authentication, authorization, session management, cryptography, secrets management, and secure API design.
  • Experience manually testing modern web applications, APIs, and distributed systems, and reviewing application architecture and source code.
  • Experience integrating application security tools into CI/CD workflows, including SAST, dynamic testing, secrets detection, container security, and infrastructure-as-code scanning.
  • Strong expertise in cloud technologies such as AWS, GCP, or Azure, modern programming languages, and the security implications of AI coding utilities.
  • Experience establishing and rolling out enterprise-wide security policies and guidelines.

Nice to have

  • Experience with Datadog, Sumo Logic, Torq, Flare, GCP, Entitle, Okta, Orca, GitLab, or Prisma.
  • Experience exploring and implementing emerging security technologies.

Culture & Benefits

  • Lean, cross-functional InfoSec environment spanning AppSec, CloudSec, SecOps, ITSec, and Compliance.
  • 18 vacation days, 9 company holidays, 5 sick days, and 2 personal days.
  • Stock options for every full-time employee.
  • Paid parental leave, commuter benefits, and health, dental, and vision insurance options.
  • 401(k) benefit and monthly social committees for company events.

Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →