Hybrid-Remote App Security Engineer (DevSecOps)

Strive Health Services LLC; Denver (CO); Hybrid; USD 109,000 - 136,000; Full time

Benefits offered by this job

Hybrid-Remote

Benefits

401k Match

Development Stipend

Paid Leave

Job summary

Strive Health is seeking an Application Security Engineer to embed security into our product development lifecycle, supporting Canvas Medical and future mobile apps. You will partner with Product and Engineering to ensure secure design and implementation from day one.

Join a collaborative team that values risk awareness, proactive remediation, and HITRUST/SOC2 readiness as part of advancing patient care and compliance across our digital health platform.

Qualifications

• Bachelor’s degree in Computer Science, Information Security, or a related field.
• 3+ to 5+ years of experience in information security, with a strong focus on Application Security, DevSecOps, or software engineering.
• Demonstrable experience integrating security tools into CI/CD pipelines (e.g., SAST, DAST, SCA).
• Experience leading or performing application threat modeling, architecture reviews, and manual security testing.
• Familiarity with securing cloud environments (SaaS, IaaS, PaaS) and understanding of cloud architecture.
• Ability to travel and be onsite to meet business needs.

Responsibilities

• Embed application security into Strive’s product development lifecycle, supporting Canvas Medical, patient-facing experiences, and future mobile applications.
• Serve as the primary security partner for Product and Engineering, ensuring secure design from inception to production.
• Establish requirements, review gates, testing frameworks, and remediation operating rhythms for a secure development pipeline.
• Design threat models and implement security testing frameworks including SAST/DAST/SCA, and manual testing as needed.
• Coordinate vulnerability management, remediation tracking, and external penetration test coordination with stakeholders.

Skills

Application security

DevSecOps

CI/CD integration

Threat modeling

Security testing

Education

Bachelor’s degree in Computer Science or Information Security

Tools

SAST

DAST

SCA

Job description

Strive Health is seeking an Application Security Engineer to embed security into our product development lifecycle, supporting Canvas Medical and future mobile apps. You will partner with Product and Engineering to ensure secure design and implementation from day one.

Join a collaborative team that values risk awareness, proactive remediation, and HITRUST/SOC2 readiness as part of advancing patient care and compliance across our digital health platform.