Senior Application Security Engineer - AppSec & SDLC

K Health

New York (NY)

On-site

USD 150,000 - 200,000

Full time

8 days ago

Get more replies from employers

Send a job-specific resume in minutes.

Job summary

K Health in New York, NY is seeking a Senior Security Engineer - Application Security to safeguard our software, cloud services, and data in a highly regulated healthcare environment. You will influence architecture, secure coding practices, and implement cutting-edge controls across the SDLC.

You will partner with engineering, perform hands-on app security testing for web apps and APIs, integrate automated security in CI/CD, and help drive policy, risk management, and regulatory compliance

Qualifications

4+ years of professional security experience in application security or related field.
Experience with CI/CD security integration and secure SDLC practices.
Strong understanding of OWASP Top 10 and API security risks.
Experience securing cloud environments (AWS/GCP/Azure) and modern architectures.

Responsibilities

Lead the development and implementation of application security across the SDLC.
Collaborate with engineering to embed security into architecture and design.
Perform hands-on security testing of web apps, APIs, and cloud services.
Improve automated security testing in CI/CD pipelines (SAST, SCA, DAST).
Evaluate and tune security tooling to reduce false positives and developer friction.
Develop secure coding standards and developer-focused guidance.
Contribute to vulnerability management and post-incident reviews.
Assess third-party apps, libraries, and integrations for risk.
Ensure HIPAA/GDPR and related healthcare regulatory compliance across products.