Remote Senior AppSec Engineer – Offensive Security Lead

Counterpart Health; United States; Remote; USD 135,000 - 175,000; Full time

Benefits offered by this job

Competitive salary

Equity opportunities

401k matching

No-Meeting Fridays

Mental health resources

Monthly cell phone stipend

Paid parental leave

Job summary

Counterpart Health is seeking a Senior Application Security Engineer to break Counterpart Assistant before others do. This hands-on role on the Eng Core team hunts for vulnerabilities in the platform used by thousands of practitioners, closes gaps, and raises the security floor across the engineering org.

You will mentor engineers, review critical PRs, and partner with security and SRE to implement defensive strategies, ensure resilience, and protect PHI in a remote-first environment.

Qualifications

• 8+ years in software engineering and 4+ years focused on application security, vulnerability research, and penetration testing.
• Proven ability to identify vulnerabilities with custom tooling you’ve built.
• Experience using AI to find vulnerabilities with appropriate guardrails.
• Ability to write code across the stack in multiple languages.
• Track record mentoring engineers in secure coding practices.
• Experience with software touching patient care and risk considerations.

Responsibilities

• Actively hunt for and close security vulnerabilities across our core product, Counterpart Assistant. Use tools and scripts you write to map a real attack.
• Harden systems, services, and endpoints; establish strong security monitoring.
• Safeguard PHI and monitor deidentification practices; close data leakage paths.
• Use AI as a force multiplier for vulnerability discovery; build safe AI practices for the org.
• Raise security bar by reviewing critical PRs, training, and mentoring engineers.
• Partner with site reliability engineering, engineering leadership, and corporate security to establish defensive strategies.
• Strengthen resilience and ensure disaster recovery is strong.

Skills

Vulnerability research

Penetration testing

Secure coding

AI tooling in security

Programming languages

Job description

Counterpart Health is seeking a Senior Application Security Engineer to break Counterpart Assistant before others do. This hands-on role on the Eng Core team hunts for vulnerabilities in the platform used by thousands of practitioners, closes gaps, and raises the security floor across the engineering org.

You will mentor engineers, review critical PRs, and partner with security and SRE to implement defensive strategies, ensure resilience, and protect PHI in a remote-first environment.