Cyber Security Engineer (Application Security)
Core
Own application security across the SDLC and CI/CD pipeline, securing code, dependencies, and infrastructure-as-code in a healthcare-regulated environment.
Role type
Senior hands-on application security engineer
Builds
Secure CI/CD pipelines, GitHub Actions workflows, and cloud infrastructure
Domain
Healthcare technology (SaaS EHR/Practice Management)
Required skills
CI/CD pipeline security, GitHub Actions security, SAST/DAST, dependency scanning, Terraform security, Zero Trust architecture, API security, cloud security (Azure/AWS), healthcare regulations (HIPAA/HITECH/HITRUST)
Preferred skills
HL7 standards, incident response, security certifications (GWAPT, OSWE, GPEN, CISSP, HCISPP)
Technologies
GitHub Advanced Security, Snyk, Terraform, Azure, AWS, SIEM, EDR/XDR, DLP
Responsibilities
Integrate security into SDLC and CI/CD pipelines, perform security assessments and threat modeling, triage scanning findings, secure CI/CD identities and permissions, review infrastructure-as-code, remediate vulnerabilities with developers, manage security tools, support incident response
Seniority
Senior, hands-on IC