Senior AppSec Engineer — SDLC, Cloud & API Security

K Health; New York (NY); On-site; USD 150,000 - 200,000; Full time

Benefits offered by this job

Stock options

Paid parental leave

Health, dental, and vision insurance

18 vacation days

9 company holidays

5 sick days

2 personal days

Monthly social committees

Job summary

K Health is seeking a Senior Security Engineer specializing in AppSec to safeguard our infrastructure, applications, cloud security, and patient trust. You’ll drive security across architecture, development, testing, and deployment in a healthcare tech environment.

You will partner with engineering teams, perform hands-on testing of web apps and APIs, and advance automated security testing in CI/CD pipelines, while aligning with HIPAA and GDPR requirements.

Qualifications

• 4+ years of professional experience in application, product or software security.
• Strong understanding of OWASP Top 10 and API security risks.
• Experience integrating application security tools into modern CI/CD workflows.
• Familiarity with static and dynamic testing, secrets detection, container security and IaC scanning.

Responsibilities

• Lead the development and implementation of robust application security protocols throughout the SDLC.
• Partner with engineering teams to embed security into architecture, design, development, testing and deployment.
• Perform hands-on security testing of web apps, APIs, cloud-native services and supporting infrastructure.
• Build and improve automated security testing within CI/CD pipelines (static analysis, dependency scanning, secrets detection, container scanning, dynamic testing).
• Evaluate effectiveness of security tools, reduce false positives and developer friction.
• Develop secure coding standards with developer-focused documentation.
• Contribute security expertise to vulnerability management, incidents and post-incident reviews.
• Evaluate third-party apps, libraries and APIs for security risk.
• Ensure adherence to healthcare regulatory/compliance requirements (HIPAA, GDPR) across products.

Skills

AppSec experience

OWASP Top 10

API security

CI/CD security tooling

Cloud security (AWS/GCP/AZURE)

Secure coding practices

Architecture review

Threat modeling

Tools

Datadog

Sumo Logic

Torq

flare.io

GCP

Entitle

Okta

Orca

GitLab

Prisma

Job description

K Health is seeking a Senior Security Engineer specializing in AppSec to safeguard our infrastructure, applications, cloud security, and patient trust. You’ll drive security across architecture, development, testing, and deployment in a healthcare tech environment.

You will partner with engineering teams, perform hands-on testing of web apps and APIs, and advance automated security testing in CI/CD pipelines, while aligning with HIPAA and GDPR requirements.