Senior Application Security Engineer: AI, SaMD & Cloud

Heartflowinc; San Francisco (CA); Hybrid; USD 165,000 - 200,000; Full time

Job summary

Heartflow is seeking a Senior Application Security Engineer to join our San Francisco team. You’ll partner with the engineering group to weave security into the Software Development Lifecycle, conduct secure code reviews, threat modeling, and drive remediation across the stack.

Bring 5+ years in application security, strong coding skills (C++/Python), experience with SAST/DAST/AI tooling, CI/CD, and cloud infrastructure (AWS, IaC).

Qualifications

• BS in Computer Science (or related degree) or relevant certifications and equivalent experience
• 5+ years of total experience with at least 1 year in Application Security or related security tasks in a development role
• Experience writing/maintaining code in at least one modern language (C++/Python) and scripting
• Experience with SAST/DAST/IA tooling and vulnerability remediation across SDLC
• Knowledge of modern AI security threats for ML and generative AI
• Ability to communicate risk to technical and non-technical audiences and lead training

Responsibilities

• Partner with engineering to provide hands-on guidance throughout the vulnerability remediation lifecycle
• Perform secure code reviews and threat modeling for Heartflow products
• Drive vulnerability identification using SAST, DAST, SCA and AI tooling
• Support vulnerability management including risk assessment and remediation
• Build security awareness through training on secure coding practices and security standards

Skills

Security communications

Programming skills

AI development tools

Education & experience

Securing SDLC

Modern AI security threats

Education

BS in Computer Science

Tools

Terraform

Chef

Ansible

Docker

Kubernetes

GitHub Actions

Job description

Heartflow is seeking a Senior Application Security Engineer to join our San Francisco team. You’ll partner with the engineering group to weave security into the Software Development Lifecycle, conduct secure code reviews, threat modeling, and drive remediation across the stack.

Bring 5+ years in application security, strong coding skills (C++/Python), experience with SAST/DAST/AI tooling, CI/CD, and cloud infrastructure (AWS, IaC).