Senior Application Security Engineer - AI Health

Heartflow; San Francisco (CA); Hybrid; USD 165,000 - 200,000; Full time

Job summary

Heartflow is seeking a Senior Application Security Engineer in San Francisco to strengthen the SDLC and protect patient data as we scale AI-powered cardiac care. This role collaborates with engineering to embed security into design, code reviews, threat modeling, and risk assessment across our software stack in a hybrid setup.

You will lead secure coding practices, perform SAST/DAST, and coordinate with CI/CD pipelines while staying current on AI security threats.

Qualifications

• 5+ years of total experience with at least 1 year in Application Security or related security tasks.
• Proficient in secure SDLC practices, threat modeling and security testing.
• Experience with CI/CD pipelines and secure coding standards.

Responsibilities

• Partner with the engineering team to provide hands-on secure coding guidance across the vulnerability remediation lifecycle.
• Drive vulnerability identification using SAST, DAST, SCA, and external testing.
• Support risk assessment, remediation prioritization, and translation of security requirements into technical tasks.
• Build security awareness through developer training and secure coding best practices.

Skills

Security communication

Programming skills

AI development tools

Education & experience

Securing SDLC

AI threats knowledge

Education

BS in Computer Science

Tools

Claude Code

Github Copilot

Job description

Heartflow is seeking a Senior Application Security Engineer in San Francisco to strengthen the SDLC and protect patient data as we scale AI-powered cardiac care. This role collaborates with engineering to embed security into design, code reviews, threat modeling, and risk assessment across our software stack in a hybrid setup.

You will lead secure coding practices, perform SAST/DAST, and coordinate with CI/CD pipelines while staying current on AI security threats.