Application Security Engineer: CI/CD & Cloud Security

TherapyNotes, LLC; Philadelphia (Philadelphia County); On-site; USD 110,000 - 130,000; Full time

Benefits offered by this job

Health Insurance

Dental & Vision

Life Insurance

Disability Insurance

Retirement Plan

Profit Sharing

Training Budget

Onboarding Program

Mentorship Program

Job summary

TherapyNotes LLC is seeking a hands-on Cyber Security Engineer to own application security across our SDLC and CI/CD pipelines. You will secure CI/CD workflows, implement code/secret scanning, and oversee IaC security within a healthcare-regulated environment.

The role covers vulnerability management, incident response, identity and access security, and collaboration with a small security team to protect patient data and support audits.

Qualifications

• Bachelor’s degree or equivalent experience in information security, CS or related field.
• 5+ years in application security or security engineering.
• Hands-on with CI/CD security, SAST/DAST, GitHub Advanced Security and Snyk.
• Experience reviewing infrastructure-as-code for security issues.

Responsibilities

• Collaborate with dev teams to embed security in SDLC and CI/CD.
• Enforce secure coding standards to protect data confidentiality and integrity.
• Perform in-depth security assessments, code reviews, and threat modeling.
• Own GitHub Advanced Security triage and improve scanning coverage.
• Secure CI/CD pipelines — identities, runners, permissions, and secrets.
• Review Terraform and IaC for security issues with IaC teams.
• Ensure measures align with HIPAA/HITRUST/HITECH and aid audits.
• Guide developers to fix vulnerabilities with actionable steps.
• Develop and manage security tools for automated testing and scanning.
• Support incident response and root-cause analysis activities.
• Contribute to security awareness and secure coding practices.

Skills

App Security

Security Eng

CI/CD

GitHub Actions

SAST/DAST

Snyk

IaC Security

SIEM/EDR

Zero Trust

HIPAA/HITRUST

API Security

Cloud Security

On-call

Certifications

Education

Bachelor's degree in information security, computer science, or related field

Job description

TherapyNotes LLC is seeking a hands-on Cyber Security Engineer to own application security across our SDLC and CI/CD pipelines. You will secure CI/CD workflows, implement code/secret scanning, and oversee IaC security within a healthcare-regulated environment.

The role covers vulnerability management, incident response, identity and access security, and collaboration with a small security team to protect patient data and support audits.