Remote Senior Application Security Engineer

K Health; United States; Remote; USD 150,000 - 200,000; Full time

Benefits offered by this job

Stock options

Paid parental leave

Health insurance

9 company holidays

Job summary

K Health is seeking a Senior Security Engineer - Application Security to join its InfoSec team remotely. You will lead secure coding practices, drive app security across the SDLC, and partner with engineering to embed security into architecture, design, and deployment.

You will perform hands-on testing of web apps, APIs, and cloud-native services, and help evolve enterprise-wide security policies. You will evaluate tools, reduce false positives, and build automated security testing into CI/CD

Qualifications

• 4+ years of professional experience in application security, product security, or software security.
• Experience with secure development life cycle and code review for security weaknesses.
• Familiarity with CI/CD workflows and security tooling integration.

Responsibilities

• Lead the development and implementation of robust application security protocols throughout the SDLC.
• Partner with engineering teams to integrate security into architecture, design, development, testing and deployment.
• Perform hands-on security testing of web applications, APIs, and cloud-native services.

Skills

Application security

Security testing

CI/CD security

Cloud security

OWASP Top 10

API security

Secure coding

Vulnerability management

Security policies

Tools

Datadog

Sumo Logic

Torq

flare.io

GCP

Entitle

Okta

Orca

GitLab

Prisma

Job description

K Health is seeking a Senior Security Engineer - Application Security to join its InfoSec team remotely. You will lead secure coding practices, drive app security across the SDLC, and partner with engineering to embed security into architecture, design, and deployment.

You will perform hands-on testing of web apps, APIs, and cloud-native services, and help evolve enterprise-wide security policies. You will evaluate tools, reduce false positives, and build automated security testing into CI/CD