Application Security Engineer

What You Will Do

• Integrate and tune SAST, SCA, secrets scanning, and container scanning tools into CI/CD pipelines to identify vulnerabilities early.
• Own the CI/CD security tooling layer end-to-end, including tool selection, integration, and remediation workflows.
• Collaborate with engineering teams to drive vulnerability remediation without blocking development progress.
• Reduce false positives by writing custom rules and improving tool configurations.
• Ensure compliance with software development lifecycle policies, standards, and controls.

Required Qualifications

• Bachelor¿s Degree in computer science or programming.
• 3+ years in DevOps, application security engineering, or platform/infrastructure engineering with a security focus.
• Hands-on experience integrating SAST tools (e.g., Semgrep, Snyk, SonarQube) into CI/CD pipelines.
• Strong working knowledge of CI/CD platforms (e.g., GitHub Actions, GitLab CI, Jenkins).
• Proficiency in scripting/tooling languages (e.g., Python, Go, JavaScript/TypeScript, Bash).
• Understanding of OWASP Top 10 and CWE Top 25 vulnerability classes.
• Experience with SCA/dependency scanning tools (e.g., Snyk, Dependabot).
• Familiarity with containerization and container security scanning (e.g., Docker, Trivy).
• Cloud platform experience (e.g., AWS, Azure, GCP) and cloud-native security tooling.
• Secrets management experience (e.g., HashiCorp Vault, AWS Secrets Manager).

Preferred Qualifications

• Prior experience as a software engineer.
• Experience with cloud-native security tooling.

What We Offer

• Join a team where you¿ll drive innovation, collaborate with passionate professionals, and contribute to mission-driven work. Grow your career through hands-on experience, learning opportunities, and the chance to make a meaningful impact in healthcare technology.

Join Our Team