Application Security Engineer (Contractor)

Radicle Health; Oregon; Hybrid; USD 73,000 - 98,000; Full time

Job summary

Radicle Health is hiring an Application Security Engineer for a 12-month contract, remote from the United States. You will architect and integrate security tooling across 10 SaaS platforms, and work closely with development and operations to embed secure coding practices and proactive security.

The role emphasizes hands-on security, threat modeling, and automation using AI to streamline workflows. The position requires 3–5 years of scripting/development, 2–3 years of cloud engineering (prefer

Qualifications

• 3–5 years of scripting and development experience, preferably supporting web applications.
• 2–3 years of cloud engineering experience, preferably using Infrastructure as Code (AWS).
• Familiarity with Claude AI and other AI tools for automation.
• NIST and HIPAA experience a plus.
• Demonstrated excellent judgment in assessing and prioritizing technical risk.
• Knowledge of security best practices and standards (OWASP/ASVS, S-SDLC, BSIMM).
• Excellent communication skills with the ability to articulate complex security issues to technical and non-technical collaborators.
• Identify and remove bottlenecks for teammates in process and technology.
• Familiarity with a wide variety of security tools, technologies, and methodologies.

Responsibilities

• Assist initiatives and projects to support and enhance security in our application development processes.
• Evaluate and optimize tools, and explore technologies to enhance security posture and scalability.
• Conduct internal penetration testing and code reviews.
• Create, update, and maintain threat models for diverse software projects.
• Leverage AI to automate workflows and build efficiencies.
• Advise on secure coding practices, assist remediation, and promote continual process improvement.
• Assist projects to analyze source code for potential vulnerabilities and remediation.
• Draft communications on security status and obtain leadership support.
• Support development of security training materials for internal teams.
• Support incident response.

Skills

Scripting & Dev

Cloud Engineering

AWS

AI Tools (Claude)

NIST / HIPAA

OWASP / ASVS

Secure Coding

Threat Modeling

Security Tooling

Tools

Security Tools

Job description

Radicle Health is a collection of human services software products designed to foster collaboration and innovation, helping organizations better serve their communities. We believe technology plays a crucial role in the success of the human services sector, but no single system can meet the diverse needs of every agency. That’s why we’ve built Radicle Health as a home for mission-driven products that support organizations in delivering essential services. Under one roof, our teams learn from each other, test ideas faster, and think holistically about the individuals and communities we serve.

At Radicle Health, you'll do meaningful work alongside people who genuinely care about our mission, our customers, and each other. Here, you're free to show up as your full self, celebrating wins, having fun, and knowing you're truly part of something bigger. You will have real ownership of your work and your contributions will have a direct impact on our success. We're invested in your growth because when you grow, so do we.

About the Job:

The Application Security Engineer reports to the Chief Information Security Officer (CISO) and works directly with the software development and production operations teams building and maintaining our 10 SaaS platforms across Radicle Health. This role requires a hands-on technical engineer to architect software security tooling and integrate security in the software development process.

*This is a 12 month contract role with potential to hire

Who you are:

• 3-5 years of scripting and development experience, preferably supporting web applications.
• 2-3 years of cloud engineering experience, preferably using Infrastructure as Code. (Emphasis in AWS)
• Familiarity with Claude AI and other AI tools and leveraging agentic AI for automation.
• NIST and HIPAA experience a plus.
• Demonstrated excellent judgment in assessing and prioritizing technical risk.
• Knowledge of security best practices and standards, such as OWASP and OWASP ASVS, S-SDLC, and BSIMM.
• Excellent communication skills with the ability to articulate complex security issues to technical and non-technical collaborators, with an inclusive mindset.
• You work to identify and remove bottlenecks for your teammates, both in process and technology.
• Familiarity with a wide variety of security tools, technologies, and methodologies

In this role, you will:

• Assist initiatives and projects to support and enhance security in our application development processes.
• Bring your ideas forward, evaluating how to optimize the tools we’re using and exploring technologies to enhance our security posture and support scalability.
• Conduct internal penetration testing and code reviews.
• Create, update, and maintain threat models for a wide variety of software projects.
• Leverage AI to automate workflows and build efficiencies.
• Work closely with software developers to advise on secure coding practices, assist with vulnerability remediation, establish a proactive security posture, and promote continual process improvement.
• Assist projects to regularly analyze source code, pinpointing and supporting remediation of potential vulnerabilities upon discovery.
• Draft communications detailing status of security projects and programs to provide stakeholder updates and obtain leadership support.
• Support development of security training material and provide guidance for internal software development teams.
• Support incident response.

Compensation:

$62.00/hour

Location:

Remote

Radicle Health is an Equal Employment Opportunity employer that proudly pursues and hires a diverse workforce. Radicle Health does not make hiring or employment decisions on the basis of race, color, religion or religious belief, ethnic or national origin, nationality, sex, gender, gender-identity, sexual orientation, disability, age, military or veteran status, or any other basis protected by applicable local, state, or federal laws or prohibited by Company policy.