Application Security Engineer - CI/CD & Cloud

TherapyNotes.com; Pennsylvania; On-site; USD 110,000 - 150,000; Full time

Benefits offered by this job

Health insurance

Dental insurance

Vision insurance

Life insurance

Disability insurance

Retirement plan with company match

Annual profit sharing

Personal development budget

Open, collaborative work environment

2-week onboarding program

Mentorship program

Job summary

TherapyNotes is seeking a hands-on Cyber Security Engineer to own application security across our SDLC and CI/CD pipeline. The ideal candidate will secure CI/CD pipelines, scanning workflows, and IaC, while navigating a healthcare-regulated environment (HIPAA, HITRUST, HITECH).

You will join a small, collaborative security team focused on vulnerability management, incident response, and identity and access security across our SaaS platform.

Qualifications

• Degree in information security, CS, or related field; equivalent experience welcomed.
• Minimum 5+ years in application security or security engineering.
• Proven ability securing CI/CD pipelines and IaC configurations.

Responsibilities

• Integrate security into SDLC and CI/CD across teams.
• Lead secure coding practices and protect data confidentiality & integrity.
• Perform security assessments, code reviews, and threat modeling.
• Own GitHub Advanced Security triage and improve scanning coverage.
• Secure CI/CD pipelines, identities, runners, and secrets handling.

Skills

CI/CD security

GitHub Actions security

SAST/DAST scanning

Terraform IaC security

Cloud security (Azure/AWS)

HIPAA/HITRUST knowledge

Incident response on-call

Education

Bachelor's degree in information security or related field

Tools

GitHub Advanced Security

Snyk

Terraform

SIEM

Job description

TherapyNotes is seeking a hands-on Cyber Security Engineer to own application security across our SDLC and CI/CD pipeline. The ideal candidate will secure CI/CD pipelines, scanning workflows, and IaC, while navigating a healthcare-regulated environment (HIPAA, HITRUST, HITECH).

You will join a small, collaborative security team focused on vulnerability management, incident response, and identity and access security across our SaaS platform.