Senior Application Security Engineer - AppSec & SDLC

K Health; New York (NY); On-site; USD 150,000 - 200,000; Full time

Job summary

K Health in New York, NY is seeking a Senior Security Engineer - Application Security to safeguard our software, cloud services, and data in a highly regulated healthcare environment. You will influence architecture, secure coding practices, and implement cutting-edge controls across the SDLC.

You will partner with engineering, perform hands-on app security testing for web apps and APIs, integrate automated security in CI/CD, and help drive policy, risk management, and regulatory compliance

Qualifications

• 4+ years of professional security experience in application security or related field.
• Experience with CI/CD security integration and secure SDLC practices.
• Strong understanding of OWASP Top 10 and API security risks.
• Experience securing cloud environments (AWS/GCP/Azure) and modern architectures.

Responsibilities

• Lead the development and implementation of application security across the SDLC.
• Collaborate with engineering to embed security into architecture and design.
• Perform hands-on security testing of web apps, APIs, and cloud services.
• Improve automated security testing in CI/CD pipelines (SAST, SCA, DAST).
• Evaluate and tune security tooling to reduce false positives and developer friction.
• Develop secure coding standards and developer-focused guidance.
• Contribute to vulnerability management and post-incident reviews.
• Assess third-party apps, libraries, and integrations for risk.
• Ensure HIPAA/GDPR and related healthcare regulatory compliance across products.

Skills

AppSec

CI/CD security

Cloud security

Vulnerability management

Threat modeling

Secure coding

OWASP Top 10

Security testing

Tools

Datadog

Sumo Logic

Torq

flare.io

GCP

Okta

GitLab

Prisma

Job description

K Health in New York, NY is seeking a Senior Security Engineer - Application Security to safeguard our software, cloud services, and data in a highly regulated healthcare environment. You will influence architecture, secure coding practices, and implement cutting-edge controls across the SDLC.

You will partner with engineering, perform hands-on app security testing for web apps and APIs, integrate automated security in CI/CD, and help drive policy, risk management, and regulatory compliance