Application Security Engineer - Hybrid-Remote

Strive Health; Denver, Northern (CO, KY); Hybrid; USD 109,000 - 136,000; Full time

Benefits offered by this job

Hybrid-Remote Flexibility

Comprehensive Benefits

Financial & Retirement Support

Time Off & Leave

Wellness & Growth

Job summary

Strive Health in Denver hybrid environment seeks an Application Security Engineer to embed security into the product development lifecycle, supporting Canvas Medical and patient apps. You’ll partner with Product and Engineering to set requirements, review gates, and implement secure design and testing practices.

You’ll design threat models, run SAST/DAST/SCA tooling, manage vulnerabilities, coordinate audits for HITRUST/SOC2, and mentor teams on secure coding.

Qualifications

• Bachelor’s degree in Computer Science, Information Security, or a related field.
• 3+ years (Engineer) to 5+ years (Senior) of information security experience with focus on Application Security/DevSecOps.
• Experience integrating security tools into CI/CD pipelines (SAST, DAST, SCA).
• Experience leading or performing application threat modeling, architecture reviews, and manual security testing.

Responsibilities

• Embed security into Strive’s product development lifecycle for Canvas Medical and related apps.
• Serve as the primary security partner for Product and Engineering, establishing requirements, review gates, testing frameworks, and remediation rhythms.

Skills

Application Security

DevSecOps

Threat Modeling

CI/CD Security

Security Testing

Education

Bachelor's degree in Computer Science/Information Security

Tools

SAST

DAST

SCA

Burp Suite Enterprise

Job description

Strive Health in Denver hybrid environment seeks an Application Security Engineer to embed security into the product development lifecycle, supporting Canvas Medical and patient apps. You’ll partner with Product and Engineering to set requirements, review gates, and implement secure design and testing practices.

You’ll design threat models, run SAST/DAST/SCA tooling, manage vulnerabilities, coordinate audits for HITRUST/SOC2, and mentor teams on secure coding.