Hybrid-Remote Application Security Engineer

Strive Health; Denver (CO); Hybrid; USD 109,000 - 136,000; Full time

Benefits offered by this job

Hybrid-Remote Flexibility

Comprehensive Benefits

Financial & Retirement Support

Time Off & Leave

Wellness & Growth

Job summary

Strive Health in Denver is seeking an Application Security Engineer to embed security throughout the product development lifecycle, supporting Canvas Medical and upcoming mobile experiences.

You will partner with Product and Engineering to define security requirements, establish review gates, and deploy SAST, DAST, SCA, and container/IaC checks, while guiding remediation and ensuring HITRUST/SOC 2 readiness.

Qualifications

• Bachelor’s degree in Computer Science, Information Security, or a related field.
• 3+ years (Engineer) to 5+ years (Senior) of experience in information security with a focus on Application Security, DevSecOps, or software engineering.
• Demonstrable experience integrating security tools into CI/CD pipelines (e.g., SAST, DAST, SCA).
• Experience leading or performing application threat modeling, architecture reviews, and manual security testing.
• Familiarity with securing cloud environments (SaaS, IaaS, PaaS) and understanding of cloud architecture.
• Internet Connectivity - Min Speeds: 3.8Mbps/3.0Mbps (up/down): Latency <60 ms.
• Ability to travel and be onsite to meet business needs.

Responsibilities

• Embed application security into product development lifecycle and partner with Product/Engineering to secure designs.
• Establish requirements, review gates, testing frameworks, and remediation rhythms.
• Design, deploy, and operate SAST, DAST, SCA, and container/IaC scanning; perform manual testing for complex vulnerabilities.
• Lead vulnerability intake, triage severities, and coordinate remediation with stakeholders.
• Coordinate external penetration tests, scoping and retesting efforts.
• Ensure alignment with compliance needs (e.g., HITRUST, SOC 2).

Skills

Threat modeling

CI/CD integration

Security testing

Cloud security

Education

Bachelor’s degree in Computer Science or Information Security

Tools

SAST

DAST

SCA

Burp Suite Enterprise

Job description

Strive Health in Denver is seeking an Application Security Engineer to embed security throughout the product development lifecycle, supporting Canvas Medical and upcoming mobile experiences.

You will partner with Product and Engineering to define security requirements, establish review gates, and deploy SAST, DAST, SCA, and container/IaC checks, while guiding remediation and ensuring HITRUST/SOC 2 readiness.