Application Security Engineer
Core
Application Security Engineer ensuring security is an integral part of the Software Development Lifecycle (SDLC) for AI-driven non-invasive cardiac test products.
Role type
Application Security Engineer
Builds
AI-driven non-invasive cardiac test products (Heartflow FFR Analysis, RoadMap Analysis, Plaque Analysis)
Domain
Healthcare / Medical Technology / AI Security
Deliverable
production ML models
Required skills
Secure code review, threat modeling, vulnerability management, SAST/DAST/SCA tooling, secure SDLC integration, AI security threat analysis, risk communication
Preferred skills
HIPAA/HITRUST compliance, Software as a Medical Device (SaMD) experience, Infrastructure as Code (Terraform, Chef, Ansible), containerization (Docker, Kubernetes), CI/CD pipelines
Technologies
C++, Python, AWS, Terraform, Chef, Ansible, Docker, Kubernetes, GitHub Actions, Claude Code, Github Copilot
Responsibilities
Partner with engineering to provide hands-on technical guidance on vulnerability remediation; Drive vulnerability identification using SAST, DAST, SCA and in-house AI tooling; Support engineering team on vulnerability management and risk assessment; Build security awareness through training on secure coding practices and standards
Seniority
Mid-Senior, hands-on IC