Application Security Engineer
Core
Embed application security into the product development lifecycle for patient-facing experiences and mobile apps, ensuring secure design through production.
Role type
Application Security Engineer (DevSecOps)
Builds
Canvas Medical patient portals, mobile applications, and integration services
Domain
Healthcare technology / Application Security
Deliverable
production ML models | product features
Required skills
Application security, DevSecOps, threat modeling, architecture reviews, SAST/DAST/SCA, CI/CD integration, cloud security, manual security testing, vulnerability management, compliance frameworks (HITRUST, SOC 2)
Preferred skills
Healthcare sector experience, PHI security, OWASP Top 10 exploitation, API/mobile security, Burp Suite Enterprise, advanced security certifications (CSSLP, CISSP)
Technologies
Burp Suite Enterprise, SAST, DAST, SCA, Jira, CI/CD pipelines
Responsibilities
Perform threat modeling and establish security baselines; collaborate on architecture reviews for authorization and IDOR prevention; design and operate security testing frameworks; manage vulnerability intake and remediation; coordinate external penetration tests; ensure compliance with HITRUST and SOC 2.
Seniority
Mid-level to Senior, hands-on IC