Application Security Engineer - Secure DevOps in Healthcare

Strive Health; Denver (CO); Ibrido; USD 109.000 - 136.000; Tempo pieno

Vantaggi offerti da questo lavoro

Hybrid-Remote Flexibility

Comprehensive Benefits

Financial & Retirement Support

Time Off & Leave

Wellness & Growth

Descrizione del lavoro

Strive Health is seeking an Application Security Engineer to embed security into our product development lifecycle, ensuring secure design, deployment, and operations for Canvas Medical and future mobile apps.

You will partner with Product and Engineering to define security requirements, review gates, testing frameworks, and remediation rhythms. The role emphasizes left-shift security within engineering pods and strong collaboration across teams.

Competenze

• Bachelor’s degree in Computer Science, Information Security, or related field.
• 3+ to 5+ years in information security focusing on application security.
• Experience integrating security tools into CI/CD pipelines (SAST/DAST/SCA).
• Experience leading threat modeling, architecture reviews, and manual testing.
• Familiarity with securing cloud environments (SaaS/IaaS/PaaS).

Mansioni

• Embed security into product development lifecycle and CI/CD workflows.
• Design and operate SAST, DAST, SCA, and container/IaC scanning.
• Perform threat modeling and architecture reviews with teams.
• Lead vulnerability intake, triage, and remediation with SLAs.
• Coordinate audits for HITRUST/SOC 2 readiness.

Conoscenze

Threat modeling

CI/CD security

Application security

SAST/DAST

Security testing

Communication

DevSecOps

Cloud security

Formazione

Bachelor’s degree in Computer Science or Information Security

Strumenti

SAST

DAST

SCA

Burp Suite Enterprise

Descrizione del lavoro

Strive Health is seeking an Application Security Engineer to embed security into our product development lifecycle, ensuring secure design, deployment, and operations for Canvas Medical and future mobile apps.

You will partner with Product and Engineering to define security requirements, review gates, testing frameworks, and remediation rhythms. The role emphasizes left-shift security within engineering pods and strong collaboration across teams.