Healthcare Security Engineer – CI/CD & Cloud

TherapyNotes.com; Pennsylvania; Presencial; USD 110.000 - 150.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Health insurance

Dental insurance

Vision insurance

Life insurance

Disability insurance

Retirement plan

Annual profit sharing

Personal development budget

Mentorship program

Descripción de la vacante

TherapyNotes LLC seeks an experienced Cyber Security Engineer to own application security across the SDLC and CI/CD pipeline in a healthcare-focused SaaS environment. You will secure CI/CD, perform code/secret/dependency scanning, and review IaC for misconfigurations, while aligning with HIPAA, HITRUST, and HITECH requirements.

You'll join a small security team, contribute to vulnerability management, incident response, identity access security, and ongoing security tooling, training developers

Formación

• Bachelor's degree or equivalent experience in information security, CS, or related field.
• 5+ years in application security or security engineering.
• Experience securing CI/CD pipelines, GitHub Actions, and SAST/DAST.
• Reviewing Terraform or IaC for security misconfigurations.
• Knowledge of SIEM/EDR/DLP, Zero Trust, and HIPAA/HITRUST/HITECH.

Responsabilidades

• Collaborate with developers to embed security in the SDLC and CI/CD.
• Enforce secure coding standards to protect data confidentiality, integrity, availability.
• Perform security assessments, code reviews, and threat modeling.
• Own GitHub Advanced Security triage and improve scanning coverage.
• Secure CI/CD pipelines, runners, and secrets; manage supply-chain risk.
• Review infrastructure-as-code for security issues with IaC teams.
• Ensure security measures align with HIPAA/HITECH/HITRUST and audits.
• Remediate vulnerabilities with actionable guidance to teams.
• Develop, deploy, and manage security tooling for automated testing.
• Support security incident response and root-cause analysis.
• Contribute to security awareness and secure coding practices.

Conocimientos

CI/CD security

SAST/DAST

GitHub Actions

IaC security

Terraform security

SIEM/EDR/DLP

Zero Trust

HIPAA/HITECH/HITRUST

API security

Cloud security

Incident response

Educación

Bachelor's degree in information security, CS, or related field

Descripción del empleo

TherapyNotes LLC seeks an experienced Cyber Security Engineer to own application security across the SDLC and CI/CD pipeline in a healthcare-focused SaaS environment. You will secure CI/CD, perform code/secret/dependency scanning, and review IaC for misconfigurations, while aligning with HIPAA, HITRUST, and HITECH requirements.

You'll join a small security team, contribute to vulnerability management, incident response, identity access security, and ongoing security tooling, training developers