Senior Application Security Engineer
Core
Own application and product security for a cloud-native healthcare SaaS platform, focusing on threat modeling, secure design/code review, and securing AI/LLM workflows.
Role type
Senior Application Security Engineer (Cloud & AI)
Builds
Security architecture for agentic AI development lifecycle, non-human identity management, and AWS environment hardening.
Domain
Healthcare (HIPAA) + Cloud Security (AWS) + AI/LLM Security
Deliverable
production ML models
Required skills
Application security, Cloud security (AWS), Identity and Access Management (IAM/OAuth/OIDC), Secure SDLC tooling (SAST/DAST/CodeQL), Vulnerability management, Python scripting, HIPAA Security Rule knowledge
Preferred skills
OSCP, GIAC, AWS Certified Security – Specialty, CISSP, Compliance automation platform experience
Technologies
AWS (IAM, EKS, S3, Terraform), GitHub Advanced Security, Okta, Python, Shell
Responsibilities
Threat modeling and secure design review, Design security architecture for AI-driven development, Manage non-human identities and secrets at scale, Secure AWS environment end-to-end, Enforce security tooling and branch protection, Review AI/vendor integrations for PHI risks, Own vulnerability management and penetration testing, Support HIPAA technical safeguards
Seniority
Senior, hands-on IC
