Security Engineer — Application Security & Identity
Core
Owns application security across multiple environments, defining and enforcing security controls for AWS-hosted workloads and GitHub-based development pipelines, including AI-assisted prototype validation.
Role type
Senior Application Security Engineer (Cloud & Identity)
Builds
Secure enterprise production deployments of AI-assisted prototypes and internal applications
Domain
Healthcare technology, Cloud Security, Identity & Access Management
Deliverable
production ML models | product features | infrastructure
Required skills
AWS IAM, SAML/OIDC federation, GitHub security tooling, threat modeling, penetration testing coordination, risk lifecycle management, compliance mapping (SOC 2, GDPR, HIPAA-adjacent)
Preferred skills
GitHub-based CI/CD pipeline security, AWS native environments, regulated industry experience (GxP, 21 CFR Part 11), security certifications (CISSP, CCSP, OSCP, GIAC)
Technologies
AWS, GitHub Advanced Security (CodeQL, Dependabot), Entra ID, Snyk, Trivy, OPA, Sentinel, tfsec, SIEM
Responsibilities
Conduct security reviews of data flow, security controls, secrets handling, and AI/LLM DLP; Co-lead production readiness reviews including threat modeling and hardening validation; Define and manage GitHub native security controls and AWS security standards; Establish standards for security tooling (SAST, SCA, container scanning, IaC policy); Scope and coordinate third-party penetration testing; Perform initial triage and risk classification for critical issues; Partner with DevOps to implement security policies in pipelines and infrastructure.
Seniority
Senior, hands-on IC
