Remote Application Security Engineer — SDLC/CI/CD

TherapyNotes, LLC; Philadelphia (Philadelphia County); À distance; USD 110 000 - 130 000; Plein temps

Avantages offerts par ce poste

Health insurance

Dental insurance

Vision insurance

Retirement plan

Profit sharing

Mentorship & onboarding

Résumé du poste

TherapyNotes LLC is seeking an experienced Cyber Security Engineer to own application security across our SDLC and CI/CD pipelines. You will secure CI/CD workflows, conduct vulnerability assessments, and work on IaC security in a healthcare-regulated environment.

The role focuses on protecting patient data, reviewing Terraform configurations, and enabling secure cloud deployments (Azure/AWS). Collaboration with a small security team and on-call rotation are expected.

Qualifications

• Bachelor's degree preferred; equivalent experience considered.
• 5+ years in application security or security engineering.
• Experience securing CI/CD pipelines and GitHub Actions including SAST/DAST, code/secret/dependency scanning, and supply-chain risk management.
• Experience reviewing Terraform or other IaC for security misconfigurations.
• Knowledge of SIEM/EDR/XDR and DLP platforms; alert triage experience.
• Understanding of Zero Trust and its application to apps and IAM.
• Familiarity with HIPAA/HITECH/HITRUST in app security.
• Experience API security in healthcare integrations; HL7 knowledge preferred.
• Cloud security experience (Azure preferred).
• Willingness for on-call incident response; industry certs a plus.

Responsabilités

• Integrate security into SDLC and CI/CD pipelines with development teams.
• Enforce secure coding standards to protect customer data.
• Conduct security assessments, code reviews, and threat modeling.
• Own and operate GitHub Advanced Security including triage and coverage improvements.
• Secure CI/CD pipelines, manage identities, runners, and secrets; review third-party actions.
• Review IaC for security issues with IaC teams; support secure deployments.
• Ensure app security aligns with healthcare regulations and audits.
• Remediate vulnerabilities with actionable guidance and patches.
• Develop and deploy security tools to automate testing and scanning.
• Support incident response and root-cause analysis.
• Contribute to security awareness across development teams.

Connaissances

5+ years in app security

CI/CD security

SAST/DAST

Terraform security review

SIEM/EDR/DLP

Zero Trust

HIPAA/HITRUST knowledge

API security

Cloud security (Azure/AWS)

Incident response on-call

Formation

Bachelor's degree in information security / CS

Outils

GitHub Advanced Security

Snyk

Terraform

Azure

AWS

Description du poste

TherapyNotes LLC is seeking an experienced Cyber Security Engineer to own application security across our SDLC and CI/CD pipelines. You will secure CI/CD workflows, conduct vulnerability assessments, and work on IaC security in a healthcare-regulated environment.

The role focuses on protecting patient data, reviewing Terraform configurations, and enabling secure cloud deployments (Azure/AWS). Collaboration with a small security team and on-call rotation are expected.