Head of API & Application Security Engineering

athenahealth; Boston (MA); On-site; USD 143,000 - 243,000; Full time

Job summary

athenahealth is seeking a Lead Security Engineer to advance security capabilities with a strong emphasis on API security. The role owns technical direction, implementation, and operation of security capabilities, working with scrum teams, product managers, and engineering leadership to improve SDLC practices.

This position focuses on setting technical strategy, influencing stakeholders, and defining measurable security outcomes within a healthcare context.

Qualifications

• Bachelor’s degree in CS/CE/Cyber Security or equivalent.
• 3+ years as software developer and 3–5 years in a security-focused development role in an agile environment.
• Experience in product security, architecture, and issue prevention/mitigation.
• Strong programming ability and knowledge of REST, OAuth 2.0, OpenID Connect, JWT, SAML.

Responsibilities

• Security strategy and SDLC adoption across the R&D organization.
• Lead API security program, testing, and API discovery activities.
• Collaborate with DevOps, IAM, API Gateway, NOC, and engineering teams to harden platforms.
• Drive vulnerability management workflows and reporting.
• Cross-functional partnership with enterprise security leadership to track issues and resolutions.

Skills

Security engineering

Agile development

API security

Code review

Education

Bachelor's degree or equivalent

Tools

Docker

Terraform

OAuth 2.0

Job description

athenahealth is seeking a Lead Security Engineer to advance security capabilities with a strong emphasis on API security. The role owns technical direction, implementation, and operation of security capabilities, working with scrum teams, product managers, and engineering leadership to improve SDLC practices.

This position focuses on setting technical strategy, influencing stakeholders, and defining measurable security outcomes within a healthcare context.