Application Security Engineer — Hybrid, Healthcare Impact

Strive Health; Denver (CO); Hybrid; USD 109,000 - 136,000; Full time

Benefits offered by this job

Hybrid-Remote Flexibility

Comprehensive Benefits

401k with employer match

Paid holidays and leave

Professional development stipend

Job summary

Strive Health is seeking an Application Security Engineer to embed security into the product development lifecycle, supporting Canvas Medical and patient-facing experiences. You will partner with Product and Engineering to build securely from design through production.

You will drive threat modeling, architecture reviews, MR checklists, and comprehensive security testing with SAST/DAST/SCA while guiding remediation and compliance readiness as needed.

Qualifications

• Bachelor’s degree in Computer Science, Information Security, or a related field.
• 3+ years (Engineer) to 5+ years (Senior) of experience in information security, with a strong focus on Application Security, DevSecOps, or software engineering.
• Demonstrable experience integrating security tools into CI/CD pipelines (e.g., SAST, DAST, SCA).
• Experience leading or performing application threat modeling, architecture reviews, and manual security testing.

Responsibilities

• Embed security into the product development lifecycle and ensure secure design from the start.
• Lead threat modeling and architecture reviews for applications and services.
• Develop and enforce MR checklists covering authentication, input validation, secrets management, and cryptography.
• Design, deploy, and operate SAST, DAST, SCA, and container/IaC scanning frameworks.

Skills

CI/CD security integration

Threat modeling

Security testing

Cloud security

Communication

Problem solving

Onsite travel

Education

Bachelor’s degree in Computer Science or Information Security

Tools

Burp Suite Enterprise

SAST

DAST

SCA

Job description

Strive Health is seeking an Application Security Engineer to embed security into the product development lifecycle, supporting Canvas Medical and patient-facing experiences. You will partner with Product and Engineering to build securely from design through production.

You will drive threat modeling, architecture reviews, MR checklists, and comprehensive security testing with SAST/DAST/SCA while guiding remediation and compliance readiness as needed.