Hybrid-Remote Application Security Engineer

Strive Health; United States; Ibrido; USD 109.000 - 136.000; Tempo pieno

Vantaggi offerti da questo lavoro

Hybrid-Remote Flexibility

Comprehensive Benefits

Financial & Retirement Support

Time Off & Leave

Wellness & Growth

Descrizione del lavoro

Strive Health is seeking an Application Security Engineer to embed security into our product development lifecycle, supporting Canvas Medical and future mobile apps. You will partner with Product and Engineering to ensure secure design from concept through production, establishing gates, testing frameworks, and remediation rhythms.

Ideal candidates have 3–5+ years in information security with a focus on application security, SAST/DAST/SCA, and cloud security.

Competenze

• Bachelor’s degree in Computer Science, Information Security, or related field.
• 3+ to 5+ years in information security with focus on application security.
• Experience integrating security tools into CI/CD pipelines (SAST, DAST, SCA).
• Experience leading threat modeling and architecture reviews.
• Familiar with securing cloud environments (SaaS/IaaS/PaaS).
• Willing to travel and onsite as needed.

Mansioni

• Embed security into the product development lifecycle for Canvas Medical.
• Partner with Product and Engineering to ensure secure design through production.
• Establish requirements, gates, testing frameworks, and remediation cadence.
• Design and operate SAST, DAST, SCA, and container/IaC scanning.
• Lead vulnerability reviews and coordinate external pen tests.
• Ensure compliance with HITRUST, SOC 2 as needed.

Conoscenze

Threat modeling

CI/CD security

SAST/DAST/SCA

DevSecOps

Application security

Formazione

B.S. in CS

Strumenti

Burp Suite Enterprise

Descrizione del lavoro

Strive Health is seeking an Application Security Engineer to embed security into our product development lifecycle, supporting Canvas Medical and future mobile apps. You will partner with Product and Engineering to ensure secure design from concept through production, establishing gates, testing frameworks, and remediation rhythms.

Ideal candidates have 3–5+ years in information security with a focus on application security, SAST/DAST/SCA, and cloud security.