Senior Application Security Engineer II (Fully Remote)

Spring Health; United States; Remote; USD 140,000 - 210,000; Full time

Job summary

Spring Health is a global mental health company leveraging an AI-native platform to deliver personalized mental health support. The team pursues innovations to eliminate barriers to care and improve security across its services.

The role focuses on secure-by-design practices, threat modeling, and hands-on code reviews for vulnerability remediation within the S-SDLC program, aligned to NIST CSF, HIPAA, and SOC-2 requirements.

Qualifications

• 7+ years of application security experience with hands-on DAST, SAST, and SCA tools.
• Experience implementing controls aligned to NIST CSF, HIPAA, or SOC-2.

Responsibilities

• Contribute to secure-by-design practices within the S-SDLC program through architecture reviews and design consultations.
• Facilitate AI-assisted threat modeling and maturity of SAST, SCA, and DAST programs.
• Perform security code reviews and support vulnerability remediation.

Skills

DAST

SAST

SCA

Threat modeling

Vulnerability remediation

Secure reviews

Tools

NIST CSF

HIPAA

SOC 2

Job description

• Contribute to secure-by-design practices within the S-SDLC program through architecture reviews and design consultations.
• Facilitate AI-assisted threat modeling and maturity of SAST, SCA, and DAST programs.
• Perform security code reviews and support vulnerability remediation.

What success looks like:

• Demonstrated improvements to security programs with measurable coverage expansion within 90 days.
• Delivery of documented AI-assisted threat modeling program and foundational ADLC framework.
• Consistent adherence to SLAs for vulnerability triage and remediation.

What you'll bring:

• 7+ years of application security experience with hands-on DAST, SAST, and SCA tools.
• Experience implementing controls aligned to NIST CSF, HIPAA, or SOC-2.

Spring Health

Spring Health is a global mental health company using an AI-native platform to deliver personalized mental health support. The company reaches over 170 million people worldwide and fosters a culture of innovation, collaboration, and commitment to eliminating barriers to mental health.