Senior App Security Engineer – AI-Driven Threat Modeling

Spring Health; United States; Remote; USD 140,000 - 210,000; Full time

Job summary

Spring Health is a global mental health company leveraging an AI-native platform to deliver personalized mental health support. The team pursues innovations to eliminate barriers to care and improve security across its services.

The role focuses on secure-by-design practices, threat modeling, and hands-on code reviews for vulnerability remediation within the S-SDLC program, aligned to NIST CSF, HIPAA, and SOC-2 requirements.

Qualifications

• 7+ years of application security experience with hands-on DAST, SAST, and SCA tools.
• Experience implementing controls aligned to NIST CSF, HIPAA, or SOC-2.

Responsibilities

• Contribute to secure-by-design practices within the S-SDLC program through architecture reviews and design consultations.
• Facilitate AI-assisted threat modeling and maturity of SAST, SCA, and DAST programs.
• Perform security code reviews and support vulnerability remediation.

Skills

DAST

SAST

SCA

Threat modeling

Vulnerability remediation

Secure reviews

Tools

NIST CSF

HIPAA

SOC 2

Job description

Spring Health is a global mental health company leveraging an AI-native platform to deliver personalized mental health support. The team pursues innovations to eliminate barriers to care and improve security across its services.

The role focuses on secure-by-design practices, threat modeling, and hands-on code reviews for vulnerability remediation within the S-SDLC program, aligned to NIST CSF, HIPAA, and SOC-2 requirements.