Senior AppSec Engineer: Healthcare AI Platform Security

Nabla; Paris (TX); On-site; USD 150,000 - 210,000; Full time

Job summary

Nabla is scaling its healthcare AI platform and seeking an exceptional Senior Security Engineer to join the security engineering team. You will work with the Lead Security Engineer to bring AppSec expertise into product squads, shaping secure-by-default libraries and guardrails across cloud, CI/CD, and AI features.

You will own threat modeling, security reviews, and external testing while collaborating with developers, compliance, and IT to protect PHI and patient data.

Qualifications

• 5 to 8+ years in security engineering, including 2–3 years in app security or similar.
• Deep understanding of modern web/API security: OAuth 2.0 / OIDC, multi-tenancy, OWASP Top 10.
• Strong coding skills in production code (Kotlin/Python) and automating in Python.
• Experience running threat modelling and CI security design reviews with triage loops.
• Ability to move across API design reviews, supply-chain hardening PRs and incidents.
• Excellent communicator who can earn developers' trust across teams.
• Full professional fluency in French and English (oral and written).

Responsibilities

• Partner with product squads to perform threat modeling and design reviews for authN/authZ, tokens, and session design.
• Secure OAuth clients, one-time codes, multi-org tenancy, Core API user API, and SDKs; identify and fix access-control flaws.
• Triage and prioritize findings from SAST, SCA, secrets, and IaC scanners; drive backlog and fix issues.
• Secure AI/LLM features, prompt injection, tool scope, PHI leakage, and model/API egress.
• Lead external testing: scope and run pentests, validate fixes, and manage vulnerability disclosures.
• Build secure-by-default guardrails, including guidelines, libraries, and pre-commit/PR checks.

Skills

Security engineering

AppSec experience

OAuth/OIDC knowledge

Kotlin

Python

Threat modelling

Communication skills

French & English fluency

SAST

SCA

Secrets scanning

Tools

SAST

SCA

Secrets scanning

Job description

Nabla is scaling its healthcare AI platform and seeking an exceptional Senior Security Engineer to join the security engineering team. You will work with the Lead Security Engineer to bring AppSec expertise into product squads, shaping secure-by-default libraries and guardrails across cloud, CI/CD, and AI features.

You will own threat modeling, security reviews, and external testing while collaborating with developers, compliance, and IT to protect PHI and patient data.