Senior AppSec Engineer: Secure SDLC & Cloud Security (Hybrid)

Doist; New York (NY); Hybrid; USD 150,000 - 200,000; Full time

Job summary

K Health is seeking a Senior Security Engineer focused on Application Security to fortify our healthcare AI platform. You will lead secure software practices, collaborate with engineering, and drive secure coding standards across SDLC, cloud and on‑prem environments.

You should have 4+ years in app security, strong OWASP knowledge, and hands-on testing of web apps, APIs, and cloud services, with experience in CI/CD tooling and security policy implementation.

Qualifications

• 4+ years of professional experience in application security or related field.
• Strong understanding of application security vulnerabilities and risk techniques, including OWASP Top 10 and API security.
• Hands-on security testing of web applications, APIs, and cloud-native services.
• Experience integrating security tooling into modern CI/CD workflows.
• Familiarity with cloud platforms (AWS, GCP, or Azure) and secure design principles.

Responsibilities

• Lead the development and implementation of application security protocols across the SDLC.
• Partner with engineering to embed security into architecture, design, development, testing and deployment.
• Perform hands-on security testing of web apps, APIs, and cloud services.

Skills

OWASP Top 10

Cloud security

CI/CD security

Security architecture

Threat modeling

Tools

Datadog

Sumo Logic

GitLab

Okta

Orca

Prisma

Job description

K Health is seeking a Senior Security Engineer focused on Application Security to fortify our healthcare AI platform. You will lead secure software practices, collaborate with engineering, and drive secure coding standards across SDLC, cloud and on‑prem environments.

You should have 4+ years in app security, strong OWASP knowledge, and hands-on testing of web apps, APIs, and cloud services, with experience in CI/CD tooling and security policy implementation.